Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I somehow noticed that there were numerous reports of security vulnerabilities of vsftpd 2.0.1~2.0.5; however, there just seems to be no public exploits.

The server I am working on has vsftpd 2.0.5 (set up by my supervisor-head administrator), and I am just worried that someone might be able to attack the server...

If there is any known exploit, can anyone provide me with the known links to public exploits? (so that I may make some vulnerability assessment.)

share|improve this question
1  
When you say that there are no public exploits, where are you looking? A google search brings up results. –  schroeder Aug 4 '12 at 19:46
add comment

1 Answer

Exploit-db finds 3 exploits (click link). 1 for that specific version and 2 for higher versions.

OSVDB shows 11 exploits however you have to click each ID to see which version the exploits are for.

cve.mitre.org also reports 11 exploits. Versions are listed in the description. There are some there specific for 2.0.5.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.