CVE-2018-17106

2018-09-1621:29:02

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file. An attacker can overwrite ebp via a long pathname.

CPENameOperatorVersion
tinyftpeq1.1
tinyftpeq1.0

CPE	Name	Operator	Version
	tinyftp	eq	1.1
	tinyftp	eq	1.0

References

github.com/vbirds/Tinyftp/issues/4