Signature Detail
Short Name |
FTP:REQERR:GNULS-WIDTH-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
FTP |
Keywords |
ftp dos |
Release Date |
2003/11/05 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
FTP: GNU ls Oversize Width Denial of Service
This signature detects denial-of-service (DoS) attempts against GNU ls. If the FTP daemon uses a vulnerable version of GNU ls, attackers can send an oversized width parameter to GNU ls to cause the server CPU utilization to temporarily reach 100% and exhaust system memory. This condition can persist for several minutes depending on the width specified.
Extended Description
Coreutils 'ls' has been reported prone to an integer overflow vulnerability. The issue reportedly presents itself when handling width and column display command line arguments. It has been reported that excessive values passed as a width argument to 'ls' may cause an internal integer value to be misrepresented. Further arithmetic performed based off this misrepresented value may have unintentional results. Additionally it has been reported that this vulnerability may be exploited in software that implements and invokes the vulnerable 'ls' utility to trigger a denial of service in the affected software.
Affected Products
- Avaya CVLAN
- Avaya Integrated Management 2.1.0
- Avaya Integrated Management
- GNU Coreutils 4.5.1
- GNU Coreutils 4.5.10
- GNU Coreutils 4.5.11
- GNU Coreutils 4.5.12
- GNU Coreutils 4.5.2
- GNU Coreutils 4.5.3
- GNU Coreutils 4.5.4
- GNU Coreutils 4.5.5
- GNU Coreutils 4.5.6
- GNU Coreutils 4.5.7
- GNU Coreutils 4.5.8
- GNU Coreutils 4.5.9
- GNU Coreutils 5.0.0
- GNU fileutils 4.0.0
- GNU fileutils 4.0.33
- GNU fileutils 4.0.36
- GNU fileutils 4.1.0
- GNU fileutils 4.1.1
- GNU fileutils 4.1.11
- GNU fileutils 4.1.5
- GNU fileutils 4.1.6
- GNU fileutils 4.1.7
- GNU fileutils 4.1.9
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0
- Red Hat Enterprise Linux AS 2.1
- Red Hat Enterprise Linux ES 2.1
- Red Hat Enterprise Linux WS 2.1
- SGI ProPack 2.2.1
- SGI ProPack 2.3.0
- Sun Cobalt Qube 3
- Sun Cobalt RaQ 4
- Sun Cobalt RaQ XTR
- Washington University wu-ftpd 2.4.1
- Washington University wu-ftpd 2.4.2 academ[BETA1-15]
- Washington University wu-ftpd 2.4.2 academ[BETA-18]
- Washington University wu-ftpd 2.4.2 (beta 18) VR10
- Washington University wu-ftpd 2.4.2 (beta 18) VR11
- Washington University wu-ftpd 2.4.2 (beta 18) VR12
- Washington University wu-ftpd 2.4.2 (beta 18) VR13
- Washington University wu-ftpd 2.4.2 (beta 18) VR14
- Washington University wu-ftpd 2.4.2 (beta 18) VR15
- Washington University wu-ftpd 2.4.2 (beta 18) VR4
- Washington University wu-ftpd 2.4.2 (beta 18) VR5
- Washington University wu-ftpd 2.4.2 (beta 18) VR6
- Washington University wu-ftpd 2.4.2 (beta 18) VR7
- Washington University wu-ftpd 2.4.2 (beta 18) VR8
- Washington University wu-ftpd 2.4.2 (beta 18) VR9
- Washington University wu-ftpd 2.4.2 VR16
- Washington University wu-ftpd 2.4.2 VR17
- Washington University wu-ftpd 2.5.0 .0
- Washington University wu-ftpd 2.6.0 .0
- Washington University wu-ftpd 2.6.1
- Washington University wu-ftpd 2.6.2
References