CVE-2020-7468 | BDVDB-2026-150989 Detail

FreeBSD

Description#

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot(5). Moreover, the bug allows a malicious client to gain root privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:30.ftpd.asc

Exploit#

No public exploit known

History#

Version 12021-03-26Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.