Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> FTP >> FTP bounce check

Vulnerability Assessment Details

FTP bounce check

Vulnerability Assessment Summary
Checks if the remote ftp server can be bounced

Detailed Explanation for this Vulnerability Assessment

It is possible to force the FTP server to connect to third parties hosts by using
the PORT command.

This problem permits intruders to use your network resources to scan other hosts, making
them think the attack comes from your network, or it can even permit them to go through
your firewall.

Solution : Upgrade to the latest version of your FTP server, or use another FTP server.
Network Security Threat Level: Medium

Networks Security ID: 126

Vulnerability Assessment Copyright: This script is Copyright (C) 1999 Renaud Deraison

Cables, Connectors