CVE-2005-3296

Public Exploit

Description

The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 17.39% Top 10%

Vendor Advisory uni-stuttgart.de

Affected: n/a n/a

References

Link	Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A410	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1472	vdb entry signature
http://www.frsirt.com/exploits/20051019.hpux_ftpd_preauth_list.pm.php	exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A767	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A615	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1212	vdb entry signature
http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00126.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1276	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1439	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A421	vdb entry signature
http://www.securityfocus.com/bid/15138	vdb entry exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A438	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1029	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A593	vdb entry signature
http://securitytracker.com/id?1015158	vdb entry

Frequently Asked Questions

What is the severity of CVE-2005-3296?: CVE-2005-3296 has been scored as a critical severity vulnerability.
How to fix CVE-2005-3296?: To fix CVE-2005-3296, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3296 being actively exploited in the wild?: It is possible that CVE-2005-3296 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~17% probability that this vulnerability will be exploited by malicious actors in the next 30 days.