NVD脆弱性詳細

CVE-2004-0148

概要	wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
公表日	2004年4月15日13:00
登録日	2021年1月29日18:00
最終更新日	2018年5月3日10:29

CVSS2.0 : HIGH
スコア	7.2
ベクター	AV:L/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:sgi:propack:2.3:::::::*
cpe:2.3:a:sgi:propack:2.4:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.1:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2::academ:::::
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18::academ:::::
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.5.0:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.0:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.1:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.2:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	http://marc.info/?l=bugtraq&m=108999466902690&w=2	HP
2	http://secunia.com/advisories/11055	SECUNIA
3	http://secunia.com/advisories/20168	SECUNIA
4	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1	SUNALERT
5	http://www.debian.org/security/2004/dsa-457	DEBIAN	Patch Vendor Advisory
6	http://www.frsirt.com/english/advisories/2006/1867	FRSIRT
7	http://www.redhat.com/support/errata/RHSA-2004-096.html	REDHAT	Patch Vendor Advisory
8	http://www.securityfocus.com/bid/9832	BID	Patch Vendor Advisory
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/15423	XF
10	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147	OVAL
11	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636	OVAL
12	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637	OVAL
13	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648	OVAL

共通脆弱性一覧

構成1	以上	以下	より上	未満
cpe:2.3:a:sgi:propack:2.3:::::::*
cpe:2.3:a:sgi:propack:2.4:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.1:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2::academ:::::
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18::academ:::::
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.5.0:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.0:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.1:::::::*
cpe:2.3:a:washington_university:wu-ftpd:2.6.2:::::::*