Heap overflow

An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...

CVE-2020-6835

CVE-2020-6835 affects Bftpd before 5.4. The vulnerability is a heap-based off-by-one error during file-transfer error checking. The NVD entry lists CVSS v2 base 7.5 (high) and CVSS v3.1 base 9.8 (critical) with Network attack vector, no user interaction required. Red Hat and OpenVAS references re...

CVE-2020-6835

An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking...

CVE-2020-6162

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

CVE-2020-6162

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

Out-of-bounds

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

CVE-2020-6162

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

CVE-2020-6162

CVE-2020-6162 affects Bftpd 5.3. An out-of-bounds read triggered by an uninitialized value causes the daemon to crash at startup, specifically in the hidegroups_init function in dirlist.c. The available connected documents confirm the vulnerability class (out-of-bounds read) and location, but do ...

Bftpd Buffer Error Vulnerability

bftpd is a small , easy to configure FTP server for UNIX-like systems . A buffer error vulnerability exists in Bftpd version 5.3. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

Bftpd < 4.7 Memory Leak Vulnerability

Bftpd is prone to a memory leak vulnerability in the file rename function. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Bftpd FTP Server Detection (FTP)

FTP based detection of Bftpd FTP Server. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

bftpd Denial of Service Vulnerability

Bftpd is a small FTP server. A security vulnerability exists in the file rename function in Bftpd versions prior to 4.7. An attacker can exploit this vulnerability to cause a denial of service memory leak...

Memory corruption

In Bftpd before 4.7, there is a memory leak in the file rename function...

CVE-2017-16892

In Bftpd before 4.7, there is a memory leak in the file rename function...

CVE-2017-16892

In Bftpd before 4.7, there is a memory leak in the file rename function...

CVE-2017-16892

The CVE-2017-16892 entry applies to Bftpd before 4.7, where the file-rename function contains a memory-leak bug. Multiple sources corroborate a memory-leak risk that can lead to denial of service; CVSS data shows a high impact for the 3.0 vector (HIGH availability impact) and medium base score (5...

CVE-2017-16892

In Bftpd before 4.7, there is a memory leak in the file rename function...

BFTPD 2.x匿名账号绕过ROOTDIR安全限制漏洞

BUGTRAQ ID: 40540 Bftpd是一款小型的FTP服务器。 bftpd处理匿名登录时可能会忽略配置文件中所指定的ROOTDIR选项，允许用户绕过限制获得对系统上任意文件或目录的读写访问。 BFTPD 2.x 厂商补丁： BFTPD ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bftpd.sourceforge.net/news.html...

CVE-2009-4593

The bftpdutmplog function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.buhost structure member, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors. NOTE: some of these details are...

Information disclosure

The bftpdutmplog function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.buhost structure member, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors. NOTE: some of these details are...