CVE-2005-0256 in Sun Solaris
Summary
The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
02/09/2005
Disclosure
05/02/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 1499 | Sun Solaris in.ftpd memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2005-0256 |
| 1245 | wu-ftpd wu_fnmatch memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2005-0256 |