VulnerabilityModified

CVE-2020-7468

Moreover, the bug allows a malicious client to gain root privileges.

HIGH 8.8EPSS 1.35%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot(5). Moreover, the bug allows a malicious client to gain root privileges.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.35% probability · 70th percentile
CISA KEV: Not listed
Affected: freebsd/freebsd
Source: secteam@freebsd.org

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:30.ftpd.ascVendor Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:30.ftpd.ascVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.