medium4.6Public exploit code
CVE-2005-3081
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WzdFTPD 0.5.4 - 'SITE' Remote Command Execution (Metasploit)2005-11-04 · remote · multiple · Verified
- WzdFTPD 0.5.4 - Remote Command Execution2005-09-24 · remote · linux · Verified
Impact
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wzdftpd | Wzdftpd | Version 0.5.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html
- http://secunia.com/advisories/16936
- http://www.debian.org/security/2006/dsa-1006
- http://www.osvdb.org/19682
- http://www.securiteam.com/exploits/5CP0R1PGUE.html
- http://www.securityfocus.com/bid/14935
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html
- http://secunia.com/advisories/16936
- http://www.debian.org/security/2006/dsa-1006
- http://www.osvdb.org/19682
- http://www.securiteam.com/exploits/5CP0R1PGUE.html
- http://www.securityfocus.com/bid/14935