CVE-2020-20277
CRITICALuftpd 2.7-2.10 - Unauthenticated Directory Traversal via FTP Command Chroot Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-20277. PoCs published by Aaron Esau.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in uftpd versions 2.7 to 2.10, allowing authenticated users (or unauthenticated if anonymous login is enabled) to read arbitrary files on the system. The PoC involves using FTP commands to traverse directories and retrieve sensitive files like /etc/passwd.
Description
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in uftpd versions 2.7 to 2.10, allowing authenticated users (or unauthenticated if anonymous login is enabled) to read arbitrary files on the system. The PoC involves using FTP commands to traverse directories and retrieve sensitive files like /etc/passwd.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H