https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 08:58:12 +0000 https://cve.radiocsirt.org/vuln/cve-2020-5204 <p><strong>Affected:</strong> troglobit uftpd</p> <p>In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len(&amp;#39;255.255.255.255&amp;#39;) == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11</p> <p><strong>Affected:</strong> troglobit uftpd</p> <p>In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len(&amp;#39;255.255.255.255&amp;#39;) == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11</p> https://cve.radiocsirt.org/vuln/cve-2020-5204