| Package | Affected versions | Patched versions |
|---|---|---|
| uftpd | < 2.12 | 2.12 |
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free