BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Titan | Bluearc | * | 4.2.944b (including) |
| Titan | Bluearc | 2100 (including) | 2100 (including) |
| Titan | Bluearc | 2200 (including) | 2200 (including) |
| Titan | Bluearc | 2500 (including) | 2500 (including) |
References
- http://osvdb.org/35414
- http://www.securityfocus.com/archive/1/466025/100/0/threaded
- http://www.securityfocus.com/bid/23540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33721
- http://osvdb.org/35414
- http://www.securityfocus.com/archive/1/466025/100/0/threaded
- http://www.securityfocus.com/bid/23540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33721