Signature Detail

FTP: vsftpd FTP Server Remote Denial of Service

This signature detects attempts to exploit a known vulnerability against vsftpd ftp server prior to version 2.3.4. A successful attack can result in a denial-of-service condition.

Extended Description

The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Affected Products

• Avaya Aura Communication Manager 4.0
• Avaya Aura Communication Manager 4.0
• Avaya Aura Communication Manager 5.1
• Avaya Aura Communication Manager 5.2
• Avaya Aura Communication Manager 5.2.1
• Avaya Aura Communication Manager 6.0
• Avaya Aura Communication Manager 6.0.1
• Avaya Aura Conferencing 6.0
• Avaya Aura Conferencing 6.0.0 Standard
• Avaya Aura Conferencing 6.0 Standard
• Avaya Aura Conferencing Standard
• Avaya Aura SIP Enablement Services 4.0
• Avaya Aura SIP Enablement Services 5.0
• Avaya Aura SIP Enablement Services 5.1
• Avaya Aura SIP Enablement Services 5.2
• Avaya Aura SIP Enablement Services 5.2.1
• Avaya Communication Server 1000E 6.0
• Avaya Communication Server 1000E 7.5
• Avaya Communication Server 1000E Signaling Server 6.0
• Avaya Communication Server 1000E Signaling Server 7.0
• Avaya Communication Server 1000E Signaling Server 7.5
• Avaya Communication Server 1000M 6.0
• Avaya Communication Server 1000M 7.0
• Avaya Communication Server 1000M 7.5
• Avaya Communication Server 1000M Signaling Server 6.0
• Avaya Communication Server 1000M Signaling Server 7.0
• Avaya Communication Server 1000M Signaling Server 7.5
• Avaya Meeting Exchange 5.0
• Avaya Meeting Exchange 5.0.0.0.52
• Avaya Meeting Exchange 5.0 SP1
• Avaya Meeting Exchange 5.0 SP2
• Avaya Meeting Exchange 5.1
• Avaya Meeting Exchange 5.1 SP1
• Avaya Meeting Exchange 5.2
• Avaya Meeting Exchange 5.2 SP1
• Avaya Meeting Exchange 5.2 SP2
• Avaya Message Networking 3.1
• Avaya Message Networking 5.2
• Avaya Message Networking 5.2.1
• Avaya Message Networking 5.2.2
• Avaya Message Networking 5.2 SP1
• Avaya Message Networking MN 3.1
• Avaya Messaging Storage Server 4.0
• Avaya Messaging Storage Server 5.0
• Avaya Messaging Storage Server 5.1
• Avaya Messaging Storage Server 5.1 SP1
• Avaya Messaging Storage Server 5.1 SP2
• Avaya Messaging Storage Server 5.2
• Avaya Messaging Storage Server 5.2.2
• Avaya Messaging Storage Server 5.2 SP1
• Avaya Messaging Storage Server 5.2 SP2
• Avaya Messaging Storage Server 5.2 SP3
• Avaya Messaging Storage Server MSS 4.1
• Avaya Messaging Storage Server MSS 5.1
• Debian Linux 6.0 amd64
• Debian Linux 6.0 arm
• Debian Linux 6.0 ia-32
• Debian Linux 6.0 ia-64
• Debian Linux 6.0 mips
• Debian Linux 6.0 powerpc
• Debian Linux 6.0 s/390
• Debian Linux 6.0 sparc
• HP Insight Control for Linux (IC-Linux) 7.0
• Mandriva Linux Mandrake 2009.0
• Mandriva Linux Mandrake 2009.0 X86 64
• Mandriva Linux Mandrake 2010.0
• Mandriva Linux Mandrake 2010.0 X86 64
• Mandriva Linux Mandrake 2010.1
• Mandriva Linux Mandrake 2010.1 X86 64
• Red Hat Enterprise Linux 5 Server
• Red Hat Enterprise Linux AS 4
• Red Hat Enterprise Linux Desktop Workstation 5 Client
• Red Hat Enterprise Linux ES 4
• Red Hat Enterprise Linux Server 6
• Red Hat Enterprise Linux Workstation 6
• Red Hat Fedora 13
• Red Hat Fedora 14
• Red Hat Fedora 15
• SuSE openSUSE 11.2
• SuSE openSUSE 11.3
• SuSE openSUSE 11.4
• SuSE SUSE Linux Enterprise 10 SP3
• SuSE SUSE Linux Enterprise 10 SP4
• SuSE SUSE Linux Enterprise 11 SP1
• SuSE SUSE Linux Enterprise Server 9
• Ubuntu Ubuntu Linux 10.04 Amd64
• Ubuntu Ubuntu Linux 10.04 ARM
• Ubuntu Ubuntu Linux 10.04 I386
• Ubuntu Ubuntu Linux 10.04 Powerpc
• Ubuntu Ubuntu Linux 10.04 Sparc
• Ubuntu Ubuntu Linux 10.10 amd64
• Ubuntu Ubuntu Linux 10.10 ARM
• Ubuntu Ubuntu Linux 10.10 i386
• Ubuntu Ubuntu Linux 10.10 powerpc
• Ubuntu Ubuntu Linux 6.06 LTS Amd64
• Ubuntu Ubuntu Linux 6.06 LTS I386
• Ubuntu Ubuntu Linux 6.06 LTS Powerpc
• Ubuntu Ubuntu Linux 6.06 LTS Sparc
• Ubuntu Ubuntu Linux 8.04 LTS Amd64
• Ubuntu Ubuntu Linux 8.04 LTS I386
• Ubuntu Ubuntu Linux 8.04 LTS Lpia
• Ubuntu Ubuntu Linux 8.04 LTS Powerpc
• Ubuntu Ubuntu Linux 8.04 LTS Sparc
• Ubuntu Ubuntu Linux 9.10 Amd64
• Ubuntu Ubuntu Linux 9.10 ARM
• Ubuntu Ubuntu Linux 9.10 I386
• Ubuntu Ubuntu Linux 9.10 Lpia
• Ubuntu Ubuntu Linux 9.10 Powerpc
• Ubuntu Ubuntu Linux 9.10 Sparc
• Vsftpd 2.3.0
• Vsftpd 2.3.2

References

• BugTraq: 46617
• CVE: CVE-2011-0762
• URL: ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changelog
• URL: http://vsftpd.beasts.org/