A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, where a crafted payload can be sent to the affected function.
References
Link | Resource |
---|---|
https://github.com/Gabe-commiter/Miniftpd/issues/4 | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-11-04 04:15
Updated : 2021-11-08 05:53
NVD link : CVE-2021-42624
Mitre link : CVE-2021-42624
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
miniftpd_project
- miniftpd