CVE-2020-20276

概要

参考情報

• arinerron.com/blog/posts/6 · Third Party Advisory
• troglobit/uftpd commit 0fb2c03 · Patch

uftpd のその他の脆弱性

• CVE-2020-20277緊急 9.8There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 du…
• CVE-2020-14149高 7.5In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of serv…
• CVE-2020-5221高 7.2In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP comman…
• CVE-2020-5204高 8.8In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large …