Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP HP-UX FTP 远程权限提升漏洞
Vulnerability Description
HP-UX是惠普以System V为基础所研发成的类UNIX操作系统。 HP-UX B.11.11版本中的wu-ftpd 2.4.2和ftpd存在权限提升漏洞。 该漏洞将分配uid 0到FTP客户端，这使得远程攻击者可以获得特权。 该情况出现在即使一个用户无密码，PAM身份认证也可以成功，比如当nsswitch.conf指定LDAP的密码消息时,试图登录LDAP帐户可以成功。
CVSS Information
N/A
Vulnerability Type
N/A