uftpd Null Pointer Dereference Vulnerability

uftpd is a Linux FTP/TFTP server. A null pointer dereference vulnerability exists in uftpd versions prior to 2.12. The vulnerability stems from the failure of handleCWD in ftpcmd.c in uftpd to properly handle user-supplied paths. An attacker can cause a denial of service via the CWD /... command ...

CVE-2020-14149

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...

CVE-2020-14149

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...

Null pointer dereference

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...

CVE-2020-14149

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...

CVE-2020-14149

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...