Description
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
References
- wuftpd-abor-gain-privileges(7169) vdb-entry
- 19970105 BoS: serious security bug in wu-ftpd v2.4 -- PATCH mailing-list
- 19970104 serious security bug in wu-ftpd v2.4 mailing-list