Skip to content
OpenAdvisories

Vendor

troglobit

5 known vulnerabilities.

Products

uftpd 2 finit 2 Redir 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2025-32022

    Finit has heap based buffer overwrite in urandom.so plugin

    Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is ena…

    troglobit finit finit finit Debian Ubuntu
  • Medium 6.5
    CVE-2020-5221

    Directory Traversal (Chroot Escape) vulnerability in uftpd

    In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesystem due to the lack of a well-written chroot jail in compose…

    troglobit uftpd
  • Medium 6.5
    CVE-2020-5204

    Buffer overflow vulnerability in uftpd

    In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correc…

    troglobit uftpd