| Package | Affected versions | Patched versions |
|---|---|---|
| ftpd | = 1.5= 1.5.1= 1.5.2= 1.5.3= 1.6 |
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free