Summary
ZeddYu Lu discovered that the FTP client from Apache Commons Net trusted
the host from PASV responses by default. A remote attacker with a
malicious FTP server could redirect the client to another server, which
could possibly result in leaked information about services running on the
private network of the client.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libcommons-net-java | 3.6-1+deb11u1build0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | libcommons-net-java | 3.6-1+deb11u1build0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | libcommons-net-java | 3.6-1+deb11u1build0.22.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libcommons-net-java | 3.4-2ubuntu2+esm1 |
Vulnerabilities 1
-
Medium 6.5
Apache Commons Net's FTP client trusts the host from PASV response by default
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…
References
-
report
https://ubuntu.com/security/CVE-2021-37533