PT-2020-13894 · Uftpd+1 · Uftpd+1

Martin Clauss · Published 2020-06-15 · Updated 2020-06-25 · CVE-2020-14149

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions uftpd versions prior to 2.12

Description The issue is caused by the mishandling of the path provided by the user in the handle CWD function in ftpcmd.c, leading to a NULL pointer dereference and denial of service. This can be demonstrated by a CWD /.. command.

Recommendations For versions prior to 2.12, update to version 2.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the handle CWD function in ftpcmd.c to minimize the risk of exploitation. Avoid using the CWD command with paths that may cause a NULL pointer dereference until the issue is resolved.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-14149

OPENSUSE-SU-2020:0865-1

OPENSUSE-SU-2020_0865-1

Affected Products

Suse

Uftpd

References · 11

• 🔥 https://github.com/troglobit/uftpd/issues/30 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00052.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0865-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14149 · Security Note
• https://bugs.gentoo.org/726308 · Patch
• https://osv.dev/vulnerability/CVE-2020-14149 · Vendor Advisory
• https://github.com/troglobit/uftpd/releases/tag/v2.12 · Note
• https://suse.com/security/cve/CVE-2020-14149 · Note
• https://bugzilla.suse.com/1172959 · Note
• https://t.me/cvenotify/4383 · Telegram Post
• https://lists.opensuse.org/archives/list/[e-mail]/thread/7ZZVJKHMYEKLIWMJZN53DLSBGWMF5BNS · Note