CVE-2017-15272

CVE-2017-15272 concerns the PSFTPd Windows FTP Server (v10.0.4 Build 729). The server stores its configuration in PSFTPd.dat, an Access database that can be extracted. The data can be obtained even though the encrypt flag is set with the password “ITsILLEGAL,” because the password is not required...

CVE-2017-15269

The CVE-2017-15269 entry concerns PSFTPd Windows FTP Server 10.0.4 Build 729. The linked documents confirm the root cause: the server does not prevent FTP bounce scans by default, enabling an attacker to perform scans via the FTP server (e.g., using nmap -b). Reported impact includes facilitating...

CVE-2017-15271

PSFTPd Windows FTP Server is affected by CVE-2017-15271 in the SFTP component (PSFTPd 10.0.4 Build 729). The issue is a use-after-free triggered remotely before authentication, due to a race condition in window message handling during cleanup of invalid connections, leading to a NULL pointer dere...

CVE-2017-15270

CVE-2017-15270 affects PSFTPd Windows FTP Server 10.0.4 Build 729. The vulnerability is due to improper escaping of data when writing to CSV logs, allowing an attacker to hide data in the GUI and add arbitrary log entries via special characters (e.g., ") and commas. Connected sources also referen...

PT-2017-13955

Name of the Vulnerable Software and Affected Versions PSFTPd version 10.0.4 Build 729 Description The issue allows FTP bounce scans to be performed by default, which can be exploited using commands like "nmap -b". This enables scans to be conducted via the FTP server. Recommendations For PSFTPd...

PT-2017-13957

Name of the Vulnerable Software and Affected Versions PSFTPd version 10.0.4 Build 729 Description The issue allows attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent by not properly escaping data before writing it into a Comma Separate...

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection / Use-After-Free Vulnerability

Exploit for windows platform in category dos / poc Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung...

PT-2017-13958

Name of the Vulnerable Software and Affected Versions PSFTPd version 10.0.4 Build 729 Description A use-after-free issue can be triggered remotely in the SFTP component. This issue can be triggered prior to authentication, allowing for a denial-of-service DoS attack against the service. By sendin...

PT-2017-13959

Name of the Vulnerable Software and Affected Versions PSFTPd version 10.0.4 Build 729 Description The issue concerns the storage of configuration data in a Microsoft Access Database file named PSFTPd.dat. This file can be extracted without requiring the password set by the application, which is...

CVE-2017-15270: Improper Input Validation

The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values CSV file. This can be used by attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' a...

CVE-2017-15272: Improper Authentication

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a...

CVE-2017-15269: Externally Controlled Reference to a Resource in Another Sphere

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server...

CVE-2017-15271: Use After Free

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By...

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection Use-After-Free

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection Use-After-Free X41 D-Sec GmbH Security Advisory: X41-2017-006 Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729...

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection / Use-After-Free

X41 D-Sec GmbH Security Advisory: X41-2017-006 Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung Vend...

PSFTPd Windows FTP Server 10.0.4 Build 729 Use-After-Free / Log Injection

X41 D-Sec GmbH Security Advisory: X41-2017-006 Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung Vend...