High severity · published Oct 5, 2023
CVE-2023-45198
ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is also vulnerable.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
Ftpd · Netbsd
before 2023-09-30 · source: NVD
TN
Tnftpd · Netbsd
before 2023-10-01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-45198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-45198
Patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/libexec/ftpd/ftpcmd.y.diff?r1=1.94&r2=1.95
Mailing List
https://mail-index.netbsd.org/source-changes/2023/09/22/msg147669.html
More from Ftpd
–
CVE-2002-2245
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which…