HP.UX.FTP.Server.Directory.Listing

description-logoDescription

It indicates a possible exploit of a directory listing vulnerability in the FTP server in HP-UX that may allow remote attackers to list arbitrary directories as root by running the LIST command before logging in.

affected-products-logoAffected Products

HP HP-UX 11.0 4
HP HP-UX 11.0
HP HP-UX 10.20
HP HP-UX B.11.11
HP HP-UX B.11.04
HP HP-UX B.11.00

Impact logoImpact

Information disclosure.

recomended-action-logoRecommended Actions

Refer to the vendor's web site for suggested workaround.
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00542740

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)