PT-2020-19599 · Freebsd · Freebsd

Published 2020-09-15 · Updated 2022-07-12 · CVE-2020-7468

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 11.3-RELEASE before p14 FreeBSD versions 11.4-RELEASE before p4 FreeBSD versions 11.4-STABLE before r365773 FreeBSD versions 12.1-RELEASE before p10 FreeBSD versions 12.2-STABLE before r365772

Description A bug in the implementation of the file system sandbox in ftpd(8) can be used to escape the file system restriction configured in ftpchroot(5) when combined with capabilities available to an authenticated FTP user. This bug allows a malicious client to gain root privileges.

Recommendations For FreeBSD version 11.3-RELEASE, update to at least p14 to resolve the issue. For FreeBSD version 11.4-RELEASE, update to at least p4 to resolve the issue. For FreeBSD version 11.4-STABLE, update to at least r365773 to resolve the issue. For FreeBSD version 12.1-RELEASE, update to at least p10 to resolve the issue. For FreeBSD version 12.2-STABLE, update to at least r365772 to resolve the issue.

Fix

Related Identifiers

CVE-2020-7468

FREEBSD-SA-20_30

ZDI-20-1431

Affected Products

Freebsd

References · 11

• https://security.freebsd.org/advisories/FreeBSD-SA-20:30.ftpd.asc · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-1431 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7468 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7468 · Vendor Advisory
• https://t.me/cvenotify/12138 · Telegram Post
• https://t.me/tmfeed/93059 · Telegram Post
• https://t.me/cybersecuritytechnologies/2342 · Telegram Post
• https://t.me/cvenotify/12183 · Telegram Post
• https://freebsd.org/security/advisories/FreeBSD-SA-20:30.ftpd.asc · Note
• https://t.me/opennews/7414 · Telegram Post
• https://t.me/cvenotify/12206 · Telegram Post