Pure-FTPd 缓冲区错误漏洞

漏洞信息详情

Pure-FTPd是一款FTP（文件传输协议）服务器。

Pure-FTPd 1.0.49版本中的utils.c文件的‘pure_strcmp’函数存在缓冲区错误漏洞。远程攻击者可借助特制请求利用该漏洞导致拒绝服务。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/U5DBVHJCXWRSJPNJQCJQCKZF6ZDPZCKA/

来源:GENTOO

链接:https://security.gentoo.org/glsa/202003-54

来源:MISC

链接:https://github.com/jedisct1/pure-ftpd/commit/bf6fcd4935e95128cf22af5924cdc8fe5c0579da

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/B5NSUDWXZVWUCL6R2PTX3KBB42Z62CA5/

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/

来源:MISC

链接:https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-9365

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156917/Gentoo-Linux-Security-Advisory-202003-54.html

暂无