https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:24:30 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-350 certfr-2018-avi-350 https://cve.radiocsirt.org/vuln/certfr-2018-avi-350 https://cve.radiocsirt.org/vuln/cnvd-2017-05227 cnvd-2017-05227 https://cve.radiocsirt.org/vuln/cnvd-2017-05227 https://cve.radiocsirt.org/vuln/euvd-2026-74701 EUVD-2026-74701 https://cve.radiocsirt.org/vuln/euvd-2026-74701 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7418 <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7418 https://cve.radiocsirt.org/vuln/ghsa-mq6p-g6qc-37c9 <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> https://cve.radiocsirt.org/vuln/ghsa-mq6p-g6qc-37c9 https://cve.radiocsirt.org/vuln/gsd-2017-7418 gsd-2017-7418 https://cve.radiocsirt.org/vuln/gsd-2017-7418 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1836-1 <p>Security update for proftpd</p> <p>Security update for proftpd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1836-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7418 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: proftpd-dfsg</p> <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: proftpd-dfsg</p> <p>ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7418