medium6.4Public exploit code
CVE-2001-0421
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.6 - FTP Core Dump Shadow Password Recovery2001-04-17 · remote · solaris · Verified
Impact
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Version 2.6 |
| Sun | Sunos | through 5.9 |