CVE-2018-17106

Name of the Vulnerable Software and Affected Versions Tinyftpd version 1.1

Description A buffer overflow issue exists in the text variable of the do mkd function in the ftpproto.c file. This allows an attacker to potentially overwrite ebp by providing a long pathname.

Recommendations For Tinyftpd version 1.1, consider restricting access to the do mkd function until a patch is available to prevent exploitation of the buffer overflow issue.