Test ID:	1.3.6.1.4.1.25623.1.0.11372
Category:	FTP
Title:	HP-UX ftpd glob() Expansion STAT Buffer Overflow
Summary:	Buffer overflow in FTP server in HPUX 11 and previous; allows remote attackers to execute arbitrary commands by creating a long pathname and calling; the STAT command, which uses glob to generate long strings.
Description:	Summary: Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. Solution: - Upgrade your FTP server. - Consider removing directories writable by 'anonymous'. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0248 BugTraq ID: 2552 http://www.securityfocus.com/bid/2552 http://www.cert.org/advisories/CA-2001-07.html NAI Advisory: 20010409 Globbing Vulnerabilities in Multiple FTP Daemons (Google Search) http://www.nai.com/research/covert/advisories/048.asp XForce ISS Database: ftp-glob-expansion(6332) https://exchange.xforce.ibmcloud.com/vulnerabilities/6332
Copyright	Copyright (C) 2003 Xue Yong Zhi

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.