CVE-2017-15272

概要

参考情報

• packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html · Third Party Advisory
• securityfocus.com/archive/1/541518/100/0/threaded
• x41-dsec.de/lab/advisories/x41-2017-006-psftpd · Third Party Advisory

psftpd のその他の脆弱性

• CVE-2017-15271中 5.9A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to …
• CVE-2017-15270中 5.3The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be use…
• CVE-2017-15269中 4.3The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing…