exploits , vulnerabilities , articles , TNFTPD Multiple Signal Handler Remote Superuser Compromise Vulnerabilities

Title	TNFTPD Multiple Signal Handler Remote Superuser Compromise Vulnerabilities
Published	2004-08-17-12:00AM
Updated	2004-10-18-02:12PM
Class	Race Condition Error
CVE	CAN-2004-0794
Remote	Yes
Local	No
Credit	Przemyslaw Frasunek disclosed these vulnerabilities.
Vulnerable	Sun Java Desktop System (JDS) 2.0 Sun Java Desktop System (JDS) 2003 NetBSD NetBSD 2.0 NetBSD NetBSD 1.6.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 beta NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 x86 NetBSD NetBSD 1.5 sh3 NetBSD NetBSD 1.5 NetBSD NetBSD 1.4.3 NetBSD NetBSD 1.4.2 x86 NetBSD NetBSD 1.4.2 SPARC NetBSD NetBSD 1.4.2 arm32 NetBSD NetBSD 1.4.2 Alpha NetBSD NetBSD 1.4.2 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.1 SPARC NetBSD NetBSD 1.4.1 sh3 NetBSD NetBSD 1.4.1 arm32 NetBSD NetBSD 1.4.1 Alpha NetBSD NetBSD 1.4.1 NetBSD NetBSD 1.4 x86 NetBSD NetBSD 1.4 SPARC NetBSD NetBSD 1.4 arm32 NetBSD NetBSD 1.4 Alpha NetBSD NetBSD 1.4 NetBSD NetBSD 1.3.3 NetBSD NetBSD 1.3.2 NetBSD NetBSD 1.3.1 NetBSD NetBSD 1.3 NetBSD NetBSD Current Luke Mewburn TNFTPD 20031217 Luke Mewburn lukemftp 1.5 S.u.S.E. Firewall Adminhost VPN S.u.S.E. Linux 6.4 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.3 S.u.S.E. Linux 8.0 S.u.S.E. Linux AdminCD for Firewall S.u.S.E. Linux Connectivity Server S.u.S.E. Linux Database Server S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux LiveCD for Firewall S.u.S.E. SuSE eMail Server III Luke Mewburn lukemftp 1.1 Heimdal Heimdal 0.6.2 Heimdal Heimdal 0.6.1 Heimdal Heimdal 0.6 Heimdal Heimdal 0.5.3 Heimdal Heimdal 0.5.2 Heimdal Heimdal 0.5.1 Heimdal Heimdal 0.5 .0 Heimdal Heimdal 0.4 e Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc Heimdal Heimdal 0.4 d Heimdal Heimdal 0.4 c Heimdal Heimdal 0.4 b Heimdal Heimdal 0.4 a Heimdal Heimdal 0.3 f Gentoo Linux 1.4 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.2.8 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.2.8
Not Vulnerable	Luke Mewburn TNFTPD 20040810 Heimdal Heimdal 0.6.3 Gentoo Linux
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
2008-11-28 ReVou Login SQL Injection Vulnerability
2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
2008-11-28 SailPlanner Login SQL Injection Vulnerability
2008-11-28 Livio.net WEB Calendar Cross Site Scripting and Multiple SQL Injection Vulnerabilities
2008-11-28 Subtext Anchor Tags HTML Injection Vulnerability