Description
The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server.
References (3)
Scores
CVSS v3
4.3
EPSS
0.0022
EPSS Percentile
45.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-610
Status
published
Products (1)
psftp/psftpd
10.0.4
Published
Nov 15, 2017
Tracked Since
Feb 18, 2026