Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> FTP >> vxworks ftpd buffer overflow


Vulnerability Assessment Details

vxworks ftpd buffer overflow

Vulnerability Assessment Summary
Checks if the vxworks ftpd can be buffer overflowed

Detailed Explanation for this Vulnerability Assessment

It might be possible to make the remote FTP server
crash by issuing this command :

CEL aaaa(...)aaaa

This problem is similar to the 'aix ftpd' overflow
but on embedded vxworks based systems like the 3com
nbx IP phone call manager and seems to cause the server
to crash.

*** Note that Nessus solely relied on the banner of
*** the remote server to issue this warning.

Solution: If you are using an embedded vxworks
product, please contact the OEM vendor and reference
WindRiver field patch TSR 296292. If this is the
3com NBX IP Phone call manager, contact 3com.

This affects VxWorks ftpd versions 5.4 and 5.4.2

For more information, see CERT VU 317417
http://www.kb.cert.org/vuls/id/317417
or full security alert at
http://www.secnap.net/security/nbx001.html

Network Security Threat Level: High

Networks Security ID: 6297

Vulnerability Assessment Copyright: This script is Copyright (C) 2002 Michael Scheidell

Cables, Connectors


Atari Lynx POWER ADAPTER NEW IN BOX 110/120 VAC AC Wall  picture

Atari Lynx POWER ADAPTER NEW IN BOX 110/120 VAC AC Wall

$15.00



Atari Mega ST keyboard keys USA English layout picture

Atari Mega ST keyboard keys USA English layout

$15.00



Atari Portfolio PC Card Drive - HPC 301 - un tested  picture

Atari Portfolio PC Card Drive - HPC 301 - un tested

$49.95



Atari OSS 4-1 Basic XL Basic XE MAC/65 ACTION   Choose your color picture

Atari OSS 4-1 Basic XL Basic XE MAC/65 ACTION Choose your color

$39.99



Atari Computer 830 Modem and Power Supply picture

Atari Computer 830 Modem and Power Supply

$139.99



POKEY CO12294 Integrated Circuit (IC) for Tempest Arcade Atari 400/800/XL/XE picture

POKEY CO12294 Integrated Circuit (IC) for Tempest Arcade Atari 400/800/XL/XE

$36.00



Atari 1040 STe 4 Meg RAM looks beautiful. No Yellowing. picture

Atari 1040 STe 4 Meg RAM looks beautiful. No Yellowing.

$1255.00



Atari Computer 8-Bit ICD R-Time 8 / SDCS Supplement Manual Instructions 36 pages picture

Atari Computer 8-Bit ICD R-Time 8 / SDCS Supplement Manual Instructions 36 pages

$12.95



Atari Jaguar RF SWITCH BOX for Atari Nintendo Sega GRAY NEW picture

Atari Jaguar RF SWITCH BOX for Atari Nintendo Sega GRAY NEW

$7.95



SWITCH Joystick Advanced GRAVIS / Amiga / Commodore/ Atari - Controller Only picture

SWITCH Joystick Advanced GRAVIS / Amiga / Commodore/ Atari - Controller Only

$54.39



Discussions

No Discussions have been posted on this vulnerability.