CVE-2001-0421 | BDVDB-2026-2446 Detail

Description#

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/177200
http://www.securityfocus.com/bid/2601

Exploit#

No public exploit known

History#

Version 12001-05-24Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.