CVE-2020-5204

In uftpd before 2.11, there is a buffer overflow vulnerability in handlePORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses...

SUSE CVE-2020-5204

In uftpd before 2.11, there is a buffer overflow vulnerability in handlePORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses...

SUSE CVE-2020-20276

An unauthenticated stack-based buffer overflow vulnerability in common.c's handlePORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution...

PT-2020-15251

Name of the Vulnerable Software and Affected Versions uftpd FTP server versions 2.10 and earlier Description An unauthenticated stack-based buffer overflow vulnerability in common.c's handle PORT can be abused to cause a crash and could potentially lead to remote code execution. Recommendations F...

PT-2020-18301

Name of the Vulnerable Software and Affected Versions uftpd versions prior to 2.11 Description The issue is caused by a buffer overflow in the handle PORT function in ftpcmd.c. This occurs when a 16-byte buffer is filled with user input via sprintf using the format specifier string %d.%d.%d.%d...