9

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot(5). Moreover, the bug allows a malicious client to gain root privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version11.3 Update-
Freebsd ≫ Freebsd Version11.3 Updatep1
Freebsd ≫ Freebsd Version11.3 Updatep10
Freebsd ≫ Freebsd Version11.3 Updatep11
Freebsd ≫ Freebsd Version11.3 Updatep12
Freebsd ≫ Freebsd Version11.3 Updatep13
Freebsd ≫ Freebsd Version11.3 Updatep2
Freebsd ≫ Freebsd Version11.3 Updatep3
Freebsd ≫ Freebsd Version11.3 Updatep4
Freebsd ≫ Freebsd Version11.3 Updatep5
Freebsd ≫ Freebsd Version11.3 Updatep6
Freebsd ≫ Freebsd Version11.3 Updatep7
Freebsd ≫ Freebsd Version11.3 Updatep8
Freebsd ≫ Freebsd Version11.3 Updatep9
Freebsd ≫ Freebsd Version11.4 Update-
Freebsd ≫ Freebsd Version11.4 Updatep1
Freebsd ≫ Freebsd Version11.4 Updatep2
Freebsd ≫ Freebsd Version11.4 Updatep3
Freebsd ≫ Freebsd Version12.1 Update-
Freebsd ≫ Freebsd Version12.1 Updatep1
Freebsd ≫ Freebsd Version12.1 Updatep2
Freebsd ≫ Freebsd Version12.1 Updatep3
Freebsd ≫ Freebsd Version12.1 Updatep4
Freebsd ≫ Freebsd Version12.1 Updatep5
Freebsd ≫ Freebsd Version12.1 Updatep6
Freebsd ≫ Freebsd Version12.1 Updatep7
Freebsd ≫ Freebsd Version12.1 Updatep8
Freebsd ≫ Freebsd Version12.1 Updatep9
Freebsd ≫ Freebsd Version12.2 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.703
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C