The version of WU-FTPD on the remote server uses a vulnerable version of /bin/ls. It does not filter arguments to /bin/ls, which could lead to a DoS. It is possible to consume all available memory on the machine  by sending :

ls '-w 1000000 -C'

An updated coreutils package is available fixing an issue in the ls(1) utility, described at :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0853

Note that this vulnerability affects Internet-facing services which execute ls(1) with user-supplied input, and although wu-ftpd is one such service it is not supplied with Fedora Core 1.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A memory starvation denial of service vulnerability in the ls program was discovered by Georgi Guninski. It is possible to allocate a huge amount of memory by specifying certain command-line arguments. It is also possible to exploit this remotely via programs that call ls such as wu-ftpd (although wu-ftpd is no longer shipped with Mandrake Linux).

Likewise, a non-exploitable integer overflow problem was discovered in ls, which can be used to crash ls by specifying certain command-line arguments. This can also be triggered via remotely accessible services such as wu-ftpd.

The provided packages include a patched ls to fix these problems.

Updated fileutils packages that close a potential denial of service vulnerability are now available.

The fileutils package contains several basic system utilities. One of these utilities is the 'ls' program, which is used to list information about files and directories.

Georgi Guninski discovered a memory starvation denial of service vulnerability in the ls program. It is possible to make ls allocate a huge amount of memory by specifying certain command line arguments.
This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0854 to this issue.

A non-exploitable integer overflow in ls has been discovered. It is possible to make ls crash by specifying certain command line arguments. This vulnerability is remotely exploitable through services like wu-ftpd, which pass user arguments to ls. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0853 to this issue.

Users are advised to update to these erratum packages, which contain backported security patches that correct these vulnerabilities.

These packages also add support for the O_DIRECT flag, which controls the use of synchronous I/O on file systems such as OCFS.

更新済みの coreutils パッケージが、ls(1) ユーティリティの問題を修正するために利用可能であり、以下で説明されています：

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0853

注意：この脆弱性は、ユーザー指定の入力で ls(1) を実行する、インターネットに接続するサービスに影響を与えます。また、wuftpd はそのようなサービスの 1 つですが、Fedora Core 1 では提供されていません。

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

提供更新版 coreutils 套件，其可修正 ls(1) 公用程式中的一個問題，詳情請參閱：

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0853

請注意，此弱點會影響執行含有使用者提供的輸入之 ls(1) 且連結網際網路的服務，雖然 wu-ftpd 是其中一項服務，但是 Fedora Core 1 未隨附該服務。

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

提供更新后的 coreutils 程序包以修复 ls(1) 实用工具中的一个问题，请参阅：

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0853

请注意，此漏洞影响以用户提供的输入来执行 ls(1) 的、面向 Internet 的服务，尽管 wu-ftpd 就是一种此类服务，但 Fedora Core 1 并不提供此服务。

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

远程服务器上的 WU-FTPD 版本使用易受影响的 /bin/ls 版本。该版本不过滤可导致 DoS 的 /bin/ls 参数。可以通过发送：

ls '-w 1000000 -C' 消耗计算机上的所有可用内存

ID	名稱	產品	系列	已發布	已更新	嚴重性
11912	WU-FTPD fileutils/coreutils ls -w Argument Memory Consumption DoS	Nessus	FTP	2003/10/29	2019/2/26	high
62243	Fedora Core 1 : coreutils-5.0-34.1 (2004-091)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	medium
14088	Mandrake Linux Security Advisory : fileutils/coreutils (MDKSA-2003:106)	Nessus	Mandriva Local Security Checks	2004/7/31	2021/1/6	medium
12428	RHEL 2.1 : fileutils (RHSA-2003:310)	Nessus	Red Hat Local Security Checks	2004/7/6	2021/1/14	medium
62243	Fedora Core 1：coreutils-5.0-34.1（2004-091）	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	medium
62243	Fedora Core 1 : coreutils-5.0-34.1 (2004-091)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	medium
62243	Fedora Core 1：coreutils-5.0-34.1 (2004-091)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	medium
11912	WU-FTPD fileutils/coreutils ls -w 参数内存消耗 DoS	Nessus	FTP	2003/10/29	2019/2/26	high

偵測

搜尋 Plugin

high

medium

medium

medium

medium

medium

medium

high