Description
ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is also vulnerable.
Advisories 1
- WID-SEC-2023-2958 NetBSD Foundation NetBSD OS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 16, 2023