CVE-2020-14149
High
Description
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTroglobit Uftpd
PublishedJun 15, 2020
First seenJun 15, 2020
How to fix
Update
- troglobit uftpd2.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| troglobit uftpd | v < 2.12 | 2.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.