CVE-2020-20277

There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

25.25% chance of exploitation in the next 30 days, 98th percentile

Published

2020-12-18

Updated

2024-08-04

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/167908/uftpd-2.10-Directory-Traversal.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51000

References

• CVE Record
• NVD entry

Related

• CVE-2020-20267
• CVE-2020-20285
• CVE-2020-20266
• CVE-2020-20300
• CVE-2020-20265
• CVE-2020-20335