CVE coverage
View on NVD →
CVE-2001-0421
CVSS 6.4
4 detections found
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | GPL FTP CWD ~ attempt | rev 13 | 2024-03-08 |
| suricata | GPL FTP CWD ~<CR><NEWLINE> attempt | rev 10 | 2024-03-08 |
| snort | GPL FTP CWD ~ attempt | rev 12 | 2011-06-08 |
| snort | GPL FTP CWD ~<CR><NEWLINE> attempt | rev 8 | 2011-05-25 |