medium4.3
CVE-2017-15269
The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default.
Impact
The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Psftp | Psftpd | Version 10.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html
- http://www.securityfocus.com/archive/1/541518/100/0/threaded
- https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
- http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html
- http://www.securityfocus.com/archive/1/541518/100/0/threaded
- https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/