Description
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Affected products
- caldera / openlinux1.2 – 1.2
- FreeBSD / FreeBSD2.1.0 – 2.1.0
- FreeBSD / FreeBSD1.2 – 1.2
- FreeBSD / FreeBSD2.0 – 2.0
- FreeBSD / FreeBSD2.1.7 – 2.1.7
- FreeBSD / FreeBSD1.0 – 1.0
- FreeBSD / FreeBSD1.1 – 1.1
- gnu / inet6.02 – 6.02
- gnu / inet5.01 – 5.01
- gnu / inet6.01 – 6.01
- ibm / aix4.2 – 4.2
- ibm / aix3.2 – 3.2
- ibm / aix4.1 – 4.1
- ibm / aix4.3 – 4.3
- NetBSD / netbsd1.1 – 1.1
- NetBSD / netbsd1.0 – 1.0
- NetBSD / netbsd1.2 – 1.2
- NetBSD / netbsd1.2.1 – 1.2.1
- sco / open_desktop3.0 – 3.0
- sco / openserver5.0.4 – 5.0.4
- sco / unixware2.1 – 2.1
- Siemens / reliant_unix
- sun / sunos5.4 – 5.4
- sun / sunos5.4 – 5.4
- sun / sunos5.5 – 5.5
- sun / sunos5.5 – 5.5
- sun / sunos5.5.1 – 5.5.1
- sun / sunos4.1.3u1 – 4.1.3u1
- sun / sunos4.1.4 – 4.1.4
- sun / sunos5.3 – 5.3
- sun / sunos5.5.1 – 5.5.1
- washington_university / wu-ftpd2.4 – 2.4