Skip to content
OpenAdvisories

Package · Debian

vsftpd

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases

    vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied commands by issuing RFC 775 X-prefixed aliases. The cmds_denied check in process_post_login() compares literal tokens, so attackers can …