Skip to content
OpenAdvisories

Product · troglobit

uftpd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-5221

    Directory Traversal (Chroot Escape) vulnerability in uftpd

    In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesystem due to the lack of a well-written chroot jail in compose…

    troglobit uftpd
  • Medium 6.5
    CVE-2020-5204

    Buffer overflow vulnerability in uftpd

    In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correc…

    troglobit uftpd