PT-2018-13899
CVE-2018-17106
·
Published
2018-09-16
·
Updated
2018-11-28
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Tinyftpd version 1.1
Description
A buffer overflow issue exists in the
text variable of the do mkd function in the ftpproto.c file. This allows an attacker to potentially overwrite ebp by providing a long pathname.Recommendations
For Tinyftpd version 1.1, consider restricting access to the
do mkd function until a patch is available to prevent exploitation of the buffer overflow issue.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾