The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Hp-ux | Hp | 10.20 (including) | 10.20 (including) |
Hp-ux | Hp | 11.00 (including) | 11.00 (including) |
Hp-ux | Hp | 11.11 (including) | 11.11 (including) |