CVE-2020-20277
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 26.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 26.24% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- troglobit/uftpd
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/167908/uftpd-2.10-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
- https://arinerron.com/blog/posts/6Third Party Advisory
- https://github.com/troglobit/uftpd/commit/455b47d3756aed162d2d0ef7f40b549f3b5b30fePatch, Third Party Advisory
- http://packetstormsecurity.com/files/167908/uftpd-2.10-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
- https://arinerron.com/blog/posts/6Third Party Advisory
- https://github.com/troglobit/uftpd/commit/455b47d3756aed162d2d0ef7f40b549f3b5b30fePatch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.