Netbsd

Ftpd

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-45198

  • EPSS 0.22%
  • Published 05.10.2023 05:15:42
  • Last modified 21.11.2024 08:26:32

ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is also vulnerable.

5

CVE-2002-2245

  • EPSS 0.25%
  • Published 31.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track o...