Check or Attack Name: ftppasvcore

An FTP daemon allows a premature PASV command, which can cause some FTP daemons to crash with a core dump. FTP core dumps can be used to salvage encrypted passwords, bypassing any shadow password scheme.

Update your FTP server.

The latest version of wu-ftp is available from ftp://ftp.academ.com/pub/wu-ftpd/ or at http://ftp.academ.com/academ/wu-ftpd/release.html.

Academ Consulting Services, WU-FTP Server Software Release Information, http://ftp.academ.com/academ/wu-ftpd/release.html

BUGTRAQ Mailing List, another two bugs in ftpd, http://www.netspace.org/cgi-bin/wa?A2=ind9610C&L=bugtraq&P=R472