CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468: Undefined Security Weakness

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

PT-2020-19599

Name of the Vulnerable Software and Affected Versions FreeBSD versions 11.3-RELEASE before p14 FreeBSD versions 11.4-RELEASE before p4 FreeBSD versions 11.4-STABLE before r365773 FreeBSD versions 12.1-RELEASE before p10 FreeBSD versions 12.2-STABLE before r365772 Description A bug in the...

FreeBSD -- ftpd privilege escalation via ftpchroot feature

Problem Description: A ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot5. Moreover, the bug allows a malicious client to gain root privileges...

FreeBSD-SA-20:30.ftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:30.ftpd Security Advisory The FreeBSD Project Topic: ftpd privilege escalation via ftpchroot feature Category: core Module: ftpd Announced: 2020-09-15...

CVE-2000-0462

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...

CVE-2000-0462: Undefined Security Weakness

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...

Дырка в ftpchroot в NetBSD

Неправильный разбор /etc/ftpchroot приводит к тому, что пользователь может попасть в директории за пределами домашнего каталога...

Security Advisory 2000-006

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...