← Back

CVE-2023-45198

nvd nist
Published: Oct 5, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is also vulnerable.

Affected (2)

Products: Netbsd: Ftpd, Tnftpd
Netbsd
2 products
Ftpd
Tnftpd
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ftpd
Before 2023-09-30
Tnftpd
Before 2023-10-01

References (4)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory

Timeline

No history available yet.