PT-2023-8972 · Proftpd+3 · Proftpd+3
Marti2203
·
Publicado
2023-12-21
·
Atualizado
2025-02-25
·
CVE-2023-51713
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ProFTPD versions prior to 1.3.8a
Description
The issue is related to the
make ftp cmd function in the main.c component of the ProFTPD FTP server, which mishandles quote and backslash semantics. This leads to a one-byte out-of-bounds read and can cause the daemon to crash. The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
For ProFTPD versions prior to 1.3.8a, update to version 1.3.8a or later to resolve the issue. As a temporary workaround, consider restricting access to the FTP server until the update can be applied.
Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linuxmint
Proftpd
Red Os
Ubuntu