OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA11282] IRIX update for ftpd

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Mon Apr 05 2004 - 08:19:50 CDT

TITLE:
IRIX update for ftpd

SECUNIA ADVISORY ID:
SA11282

VERIFY ADVISORY:
http://secunia.com/advisories/11282/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
From remote

OPERATING SYSTEM:
SGI IRIX 6.5.x

DESCRIPTION:
SGI has issued updates for ftpd. These fixes a vulnerability allowing
malicious users to cause a Denial of Service.

It is possible to cause a Denial of Service using "PORT" mode. No
further information is available.

A potential security issue has also been fixed. The "ftp_syslog()"
function didn't work with anonymous FTP.

SOLUTION:
Patches are available:

IRIX 6.5.20:
ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5547.tar

IRIX 6.5.21:
ftp://patches.sgi.com/support/free/security/patches/6.5.21/patch5547.tar

IRIX 6.5.22:
ftp://patches.sgi.com/support/free/security/patches/6.5.22/patch5525.tar

IRIX 6.5.23:
ftp://patches.sgi.com/support/free/security/patches/6.5.23/patch5525.tar

ORIGINAL ADVISORY:
ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------