Bug 1187041 – CVE-2015-1419 vsftpd: access restrictions bypass

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1187041 - (CVE-2015-1419) CVE-2015-1419 vsftpd: access restrictions bypass

Summary:	CVE-2015-1419 vsftpd: access restrictions bypass

Status:	CLOSED NOTABUG

Aliases:	CVE-2015-1419

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20150119,repor...
Keywords:	Security

Depends On:	1187043
Blocks:	1187042
	Show dependency tree / graph

Reported:	2015-01-29 03:58 EST by Vasyl Kaigorodov
Modified:	2015-12-03 06:37 EST (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-07-17 00:11:55 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Vasyl Kaigorodov 2015-01-29 03:58:02 EST

Common Vulnerabilities and Exposures assigned an identifier CVE-2015-1419 to the following vulnerability:

Name: CVE-2015-1419
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1419
Assigned: 20150127
Reference: http://secunia.com/advisories/62415

Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

Comment 1 Vasyl Kaigorodov 2015-01-29 03:59:54 EST

Created vsftpd tracking bugs for this issue:

Affects: fedora-all [bug 1187043]

Comment 2 Huzaifa S. Sidhpurwala 2015-07-17 00:11:55 EDT

As per the vsftpd.conf man page:

"This option is very simple, and should not be used for serious access control - the filesystem's permissions should be used in preference. However, this option may be useful in certain virtual user setups. In particular aware that if a filename is accessible by a variety  of  names (perhaps  due  to symbolic links or hard links), then care must be taken to deny access to all the names."

The man page advices users to exercise caution when using the deny_file option and mentions that filesystem permissions should be preferred.

Based on the above documentation, Red Hat Product Security Team, does not consider this issue as a security flaw.

Note You need to log in before you can comment on or make changes to this bug.