Description
Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.
References
- 20050308 Re: Gene6 FTP Server Local Privilege Escalation Vulnerability mailing-list
- http://secway.org/Advisory/ad20050303.txt
- 12739 vdb-entry
- 20050307 Gene6 FTP Server Local Privilege Escalation Vulnerability mailing-list
- 14436 third-party-advisory