Lucene search

FreebsdCVE-2020-7468

HistoryMar 26, 2021 - 9:15 p.m.

CVE-2020-7468

2021-03-2621:15:13

freebsd

web.nvd.nist.gov

cve-2020-7468

freebsd

ftpd bug

file system sandbox

root privileges

nvd

security advisory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

45.9%

JSON

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot(5). Moreover, the bug allows a malicious client to gain root privileges.

Affected configurations

Nvd

Node

freebsdfreebsdMatch11.3-

freebsdfreebsdMatch11.3p1

freebsdfreebsdMatch11.3p10

freebsdfreebsdMatch11.3p11

freebsdfreebsdMatch11.3p12

freebsdfreebsdMatch11.3p13

freebsdfreebsdMatch11.3p2

freebsdfreebsdMatch11.3p3

freebsdfreebsdMatch11.3p4

freebsdfreebsdMatch11.3p5

freebsdfreebsdMatch11.3p6

freebsdfreebsdMatch11.3p7

freebsdfreebsdMatch11.3p8

freebsdfreebsdMatch11.3p9

freebsdfreebsdMatch11.4-

freebsdfreebsdMatch11.4p1

freebsdfreebsdMatch11.4p2

freebsdfreebsdMatch11.4p3

freebsdfreebsdMatch12.1-

freebsdfreebsdMatch12.1p1

freebsdfreebsdMatch12.1p2

freebsdfreebsdMatch12.1p3

freebsdfreebsdMatch12.1p4

freebsdfreebsdMatch12.1p5

freebsdfreebsdMatch12.1p6

freebsdfreebsdMatch12.1p7

freebsdfreebsdMatch12.1p8

freebsdfreebsdMatch12.1p9

freebsdfreebsdMatch12.2-

VendorProductVersionCPE
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p13:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
freebsdfreebsd11.3cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:-::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p1::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p10::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p11::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p12::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p13::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p2::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p3::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p4::::::
freebsd	freebsd	11.3	cpe:2.3:o:freebsd:freebsd:11.3:p5::::::

Rows per page:

1-10 of 291

CNA Affected

[
  {
    "product": "FreeBSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FreeBSD 12.1-RELEASE before p10, 11.4-RELEASE before p4, 11.3-RELEASE before p14"
      }
    ]
  }
]

References

security.FreeBSD.org/advisories/FreeBSD-SA-20:30.ftpd.asc

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

45.9%

JSON

Related for CVE-2020-7468