NVD

Id
84843  
Name
CVE-2017-7418  
Description
ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-04  
Modified Date
2017-04-11  
Seq
2017-7418  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417617 84843 CVE-2017-3014 97550  View
417618 84843 CVE-2017-3014 https://helpx.adobe.com/security/products/acrobat/apsb17-11.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66626 JVNDB-2017-002951 ProFTPD におけるリンク解釈に関する脆弱性 ProFTPD には、リンク解釈に関する脆弱性が存在します。 CVE-2017-7418 0 CVE-2017-7418 84843 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002951.html 2017-03-06 2017-05-09 View