| Package | Affected versions | Patched versions |
|---|---|---|
| tnftpd | = 20040810= 20061217= 20080609 |
tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free