| Package | Affected versions | Patched versions |
|---|---|---|
| ftp server | = 1.0= 1.01= 1.02= 1.03= 1.05= 1.1= 1.2= 1.22= 1.5= 1.6= 1.7= 1.71= 2.0= 2.01= 2.02= 2.1= 2.11= 2.15= 2.16= 2.2= 2.21= 2.22= 2.23= 2.3= 2.31= 2.32= 2.4= 2.41= 2.42= 2.43= 2.44= 2.45= 2.46= 2.47= 2.48= 2.49= 2.50= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.7.1= 3.0.8= 3.1= 3.1.0.3= 3.1.0.4= 3.1.0.5= 3.1.1= 3.1.2= 3.1.3= 3.1.3.1= 3.1.4= 4.0.0= 4.0.0.11= 4.0.0.6= 4.0.0.8= 4.0.0.9= 4.0.1= 4.0.1.1= 4.0.2= 4.0.2.2= 5.0.0.0= 5.0.0.1= 5.0.0.2= 5.0.0.3= 5.0.0.4= 5.0.0.5= 5.0.0.6= 5.0.0.7= 5.0.1.0= 5.0.1.1= 5.0.1.2= 5.0.2.0= 5.0.3.0= 5.0.3.1= 5.0.4.0= 5.0.4.1= 5.0.4.2≤ 5.0.4.3 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free