CVE-2003-0135: High severity redhat Linux vulnerability
vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcpwrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Rebuild or reinstall vsftpd so it is compiled/linked against TCP wrappers (tcp_wrappers) support, enabling vsftpd to enforce access restrictions via TCP wrappers (e.g., ensure build uses the tcp_wrappers library or install a vendor-provided vsftpd package that includes tcp_wrappers support).
vsftpd (Red Hat Linux 9) compiled_with_tcp_wrappers = true
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0135?
CVE-2003-0135 has a medium severity level as it allows unauthorized access due to improper access restrictions.
How do I fix CVE-2003-0135?
To fix CVE-2003-0135, ensure that vsftpd is compiled with TCP wrappers support and configure appropriate rules.
What versions of Red Hat Linux are affected by CVE-2003-0135?
CVE-2003-0135 specifically affects Red Hat Linux version 9.0.
What component of Red Hat Linux is impacted by CVE-2003-0135?
CVE-2003-0135 impacts the vsftpd FTP daemon in Red Hat Linux.
Is access control possible with CVE-2003-0135?
No, CVE-2003-0135 prevents proper access control due to the lack of TCP wrappers in vsftpd.