Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer overflow vulnerability in uftpd
Vulnerability Description
In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len('255.255.255.255') == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
uftpd 缓冲区错误漏洞
Vulnerability Description
uftpd是一款基于Linux平台的FTP/TFTP文件传输服务器。 uftpd 2.11之前版本中的ftpcmd.c文件的‘handle_PORT’函数存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可借助特制IPv4地址利用该漏洞在系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A