Description
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
References
- 1374 vdb-entry
- 20000614 Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON mailing-list
- kerberos-gssftpd-dos(4734) vdb-entry
- 4885 vdb-entry
- http://web.mit.edu/kerberos/www/advisories/ftp.txt