Description
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.
References
- 1020682 vdb-entry
- ADV-2008-2364 vdb-entry
- HPSBUX02356 vendor-advisory
- 30666 vdb-entry
- [oss-security] 20080820 FW: CVE-2008-1668 - ftpd 2.4 - unauthorized root access - patch details mailing-list
- oval:org.mitre.oval:def:5971 vdb-entry signature
- hpux-ftpd-security-bypass(44414) vdb-entry
- 31471 third-party-advisory