Skip to content
OpenAdvisories

Product · Syncplify

Syncplify Server!

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.8

    Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P

    Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file con…

  • Medium 6.8

    Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape

    Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the req…