CVE-2003-0135: vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed a...

Security readout for executives and security teams

This issue affects Red Hat Linux 9 systems where vsftpd was installed as a standalone FTP service but not built with TCP wrappers support. Access rules administrators expected to enforce could be bypassed by configuration reality, leaving FTP reachable more broadly than intended. Exposure is likely limited to legacy Red Hat Linux 9 installations running vsftpd as a standalone service and relying on tcp_wrappers for FTP access restrictions. Modern systems are not identified as affected in the provided bundle. Treat this as a legacy exposure review item. It is not currently evidenced as actively exploited, but any remaining Red Hat Linux 9 FTP service should be considered operationally risky because intended access restrictions may not work. Mitigation focus: Review Red Hat RHSA-2003:084 for vendor remediation before production changes.; Identify Red Hat Linux 9 hosts running standalone vsftpd.; Confirm vsftpd package state against the vendor advisory or OVAL definition..

Prepared

Jun 30, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.