Vulnerabilities

TI-2017-11189 CVE-2017-15272 · GHSA-jc82-2cpg-hfg5

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat.

LOW 25

The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00561 Published 2017-11-15 No fix listed CWE-287

TI-2017-11188 CVE-2017-15271 · GHSA-fcg6-9hqq-q764

LOW 38

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.08742 Published 2017-11-15 No fix listed CWE-416

TI-2017-11187 CVE-2017-15270 · GHSA-fwmp-3wvg-jv2j

LOW 34

The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.06972 Published 2017-11-15 No fix listed CWE-20

TI-2017-11186 CVE-2017-15269 · GHSA-w5qc-2wh9-55pc

LOW 23

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.015 Published 2017-11-15 No fix listed CWE-610