Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
uftpd 路径遍历漏洞
Vulnerability Description
uftpd是瑞典Joachim Nilsson个人开发者的一款基于Linux平台的FTP/TFTP文件传输服务器。 uftpd FTP server versions 2.7 to 2.10 存在路径遍历漏洞，该漏洞源于不同FTP命令中存在多个未经身份验证的目录遍历漏洞，这是由于常见的chroot jail实现不当造成的common.c的 compose_abspath function函数可能被滥用来读写文件系统上的任意文件，泄漏进程内存，或者潜在地导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A