Psftp

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Psftp records in CISA KEV

No Psftp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Psftpd · all components

TI-2017-11188 CVE-2017-15271 · GHSA-fcg6-9hqq-q764

LOW 38

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.08742 Published 2017-11-15 No fix listed CWE-416

TI-2017-11187 CVE-2017-15270 · GHSA-fwmp-3wvg-jv2j

LOW 34

The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.06972 Published 2017-11-15 No fix listed CWE-20

TI-2017-11189 CVE-2017-15272 · GHSA-jc82-2cpg-hfg5

LOW 25

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00561 Published 2017-11-15 No fix listed CWE-287

TI-2017-11186 CVE-2017-15269 · GHSA-w5qc-2wh9-55pc

LOW 23

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.015 Published 2017-11-15 No fix listed CWE-610