Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> FTP >> vxworks ftpd buffer overflow


Vulnerability Assessment Details

vxworks ftpd buffer overflow

Vulnerability Assessment Summary
Checks if the vxworks ftpd can be buffer overflowed

Detailed Explanation for this Vulnerability Assessment

It might be possible to make the remote FTP server
crash by issuing this command :

CEL aaaa(...)aaaa

This problem is similar to the 'aix ftpd' overflow
but on embedded vxworks based systems like the 3com
nbx IP phone call manager and seems to cause the server
to crash.

*** Note that Nessus solely relied on the banner of
*** the remote server to issue this warning.

Solution: If you are using an embedded vxworks
product, please contact the OEM vendor and reference
WindRiver field patch TSR 296292. If this is the
3com NBX IP Phone call manager, contact 3com.

This affects VxWorks ftpd versions 5.4 and 5.4.2

For more information, see CERT VU 317417
http://www.kb.cert.org/vuls/id/317417
or full security alert at
http://www.secnap.net/security/nbx001.html

Network Security Threat Level: High

Networks Security ID: 6297

Vulnerability Assessment Copyright: This script is Copyright (C) 2002 Michael Scheidell

Cables, Connectors


TRUENAS READY SERVER HP Proliant MicroServer Gen8, Xeon E3 2.30GHz 4 HDD SLOTS picture

TRUENAS READY SERVER HP Proliant MicroServer Gen8, Xeon E3 2.30GHz 4 HDD SLOTS

$389.99



HPE ProLiant MicroServer Gen10 AMD Opteron X3216 8GB RAM No HDDs picture

HPE ProLiant MicroServer Gen10 AMD Opteron X3216 8GB RAM No HDDs

$550.00



HPE HP iLO2 3 4 Advanced Key Lifetime License Microserver ProLiant Server Gen789 picture

HPE HP iLO2 3 4 Advanced Key Lifetime License Microserver ProLiant Server Gen789

$6.90



HPE microserver Gen8 Update Firmware iLO4 + BIOS System Latest HP Server FAST⚡️✅ picture

HPE microserver Gen8 Update Firmware iLO4 + BIOS System Latest HP Server FAST⚡️✅

$89.99



HP Proliant MicroServer Gen8;  8GB RAM NO HDD picture

HP Proliant MicroServer Gen8;  8GB RAM NO HDD

$250.00



Super micro Server picture

Super micro Server

$500.00



HPE ProLiant Gen 8 2.3 GHz Intel Xeon E3-1220L v2 8 GB RAM 2 TB HDD Micro Server picture

HPE ProLiant Gen 8 2.3 GHz Intel Xeon E3-1220L v2 8 GB RAM 2 TB HDD Micro Server

$379.99



Super Micro Computer Superserver 5015M-T/MT/MT+ picture

Super Micro Computer Superserver 5015M-T/MT/MT+

$129.95



HPE MicroServer Gen10 Plus iLO Enablement Kit for HPE MicroServer Gen10 Plus picture

HPE MicroServer Gen10 Plus iLO Enablement Kit for HPE MicroServer Gen10 Plus

$88.04



Used Super Micro X8DT6 EMC Isilon NL400 System Motherboard No RAM, CPU, Cables picture

Used Super Micro X8DT6 EMC Isilon NL400 System Motherboard No RAM, CPU, Cables

$100.99



Discussions

No Discussions have been posted on this vulnerability.