Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wu-ftpd目录限制访问绕过漏洞
Vulnerability Description
Wu-ftpd是一个基于BSD ftpd的FTP服务器程序，由华盛顿大学维护。 Wu-ftpd在处理目录限制访问实现上存在问题，远程攻击者可以利用这个漏洞绕过受限目录，访问ROOT目录内容。 Glenn Stewart发现用户可通过更改他们HOME目录上的权限绕过由'restricted-gid'选项限制的目录访问策略。在后续的登录中，当访问用户的HOME目录被拒绝后，wu-ftpd会返回到ROOT目录中，目前没有提供详细漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A