Vulnerabilities > CVE-2020-8284

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

Vulnerable Configurations

Part	Description	Count
Application	Haxx Haxx Curl 4.9 Haxx Curl 6.0 Haxx Curl 6.1 Haxx Curl 6.2 Haxx Curl 6.3 Haxx Curl 6.3.1 Haxx Curl 6.4 Haxx Curl 6.5 Haxx Curl 6.5.1 Haxx Curl 6.5.2 Haxx Curl 7.1 Haxx Curl 7.1.1 Haxx Curl 7.2 Haxx Curl 7.2.1 Haxx Curl 7.3 Haxx Curl 7.4 Haxx Curl 7.4.1 Haxx Curl 7.4.2 Haxx Curl 7.5 Haxx Curl 7.5.1 Haxx Curl 7.5.2 Haxx Curl 7.6 Haxx Curl 7.6.1 Haxx Curl 7.7 Haxx Curl 7.7.1 Haxx Curl 7.7.2 Haxx Curl 7.7.3 Haxx Curl 7.8 Haxx Curl 7.8.1 Haxx Curl 7.9 Haxx Curl 7.9.1 Haxx Curl 7.9.2 Haxx Curl 7.9.3 Haxx Curl 7.9.4 Haxx Curl 7.9.5 Haxx Curl 7.9.6 Haxx Curl 7.9.7 Haxx Curl 7.9.8 Haxx Curl 7.10 Haxx Curl 7.10.1 Haxx Curl 7.10.2 Haxx Curl 7.10.3 Haxx Curl 7.10.4 Haxx Curl 7.10.5 Haxx Curl 7.10.6 Haxx Curl 7.10.7 Haxx Curl 7.10.8 Haxx Curl 7.11.0 Haxx Curl 7.11.1 Haxx Curl 7.11.2 Haxx Curl 7.12.0 Haxx Curl 7.12.1 Haxx Curl 7.12.2 Haxx Curl 7.12.3 Haxx Curl 7.13.0 Haxx Curl 7.13.1 Haxx Curl 7.13.2 Haxx Curl 7.14.0 Haxx Curl 7.14.1 Haxx Curl 7.15.0 Haxx Curl 7.15.1 Haxx Curl 7.15.2 Haxx Curl 7.15.3 Haxx Curl 7.15.4 Haxx Curl 7.15.5 Haxx Curl 7.16.0 Haxx Curl 7.16.1 Haxx Curl 7.16.2 Haxx Curl 7.16.3 Haxx Curl 7.16.4 Haxx Curl 7.17.0 Haxx Curl 7.17.1 Haxx Curl 7.18.0 Haxx Curl 7.18.1 Haxx Curl 7.18.2 Haxx Curl 7.19.0 Haxx Curl 7.19.1 Haxx Curl 7.19.2 Haxx Curl 7.19.3 Haxx Curl 7.19.4 Haxx Curl 7.19.5 Haxx Curl 7.19.6 Haxx Curl 7.19.7 Haxx Curl 7.19.7-53 Haxx Curl 7.20.0 Haxx Curl 7.20.1 Haxx Curl 7.21.0 Haxx Curl 7.21.1 Haxx Curl 7.21.2 Haxx Curl 7.21.3 Haxx Curl 7.21.4 Haxx Curl 7.21.5 Haxx Curl 7.21.6 Haxx Curl 7.21.7 Haxx Curl 7.22.0 Haxx Curl 7.23.0 Haxx Curl 7.23.1 Haxx Curl 7.24.0 Haxx Curl 7.25.0 Haxx Curl 7.26.0 Haxx Curl 7.27.0 Haxx Curl 7.28.0 Haxx Curl 7.28.1 Haxx Curl 7.29.0 Haxx Curl 7.30.0 Haxx Curl 7.31.0 Haxx Curl 7.32.0 Haxx Curl 7.33.0 Haxx Curl 7.34.0 Haxx Curl 7.35.0 Haxx Curl 7.36.0 Haxx Curl 7.37.0 Haxx Curl 7.37.1 Haxx Curl 7.38.0 Haxx Curl 7.39.0 Haxx Curl 7.40.0 Haxx Curl 7.41.0 Haxx Curl 7.42.0 Haxx Curl 7.42.1 Haxx Curl 7.43.0 Haxx Curl 7.44.0 Haxx Curl 7.45.0 Haxx Curl 7.46.0 Haxx Curl 7.47.0 Haxx Curl 7.47.1 Haxx Curl 7.48.0 Haxx Curl 7.49.0 Haxx Curl 7.49.1 Haxx Curl 7.50.0 Haxx Curl 7.50.1 Haxx Curl 7.50.2 Haxx Curl 7.50.3 Haxx Curl 7.51.0 Haxx Curl 7.52.0 Haxx Curl 7.52.1 Haxx Curl 7.53.0 Haxx Curl 7.53.1 Haxx Curl 7.54.0 Haxx Curl 7.54.1 Haxx Curl 7.55.0 Haxx Curl 7.55.1 Haxx Curl 7.56.0 Haxx Curl 7.56.1 Haxx Curl 7.57.0 Haxx Curl 7.58.0 Haxx Curl 7.59.0 Haxx Curl 7.60.0 Haxx Curl 7.61.0 Haxx Curl 7.61.1 Haxx Curl 7.62.0 Haxx Curl 7.63.0 Haxx Curl 7.64.0 Haxx Curl 7.64.1 Haxx Curl 7.65.0 Haxx Curl 7.65.1 Haxx Curl 7.65.2 Haxx Curl 7.65.3 Haxx Curl 7.66.0 Haxx Curl 7.67.0 Haxx Curl 7.68.0 Haxx Curl 7.69.0 Haxx Curl 7.69.1 Haxx Curl 7.70.0 Haxx Curl 7.71.0 Haxx Curl 7.71.1 Haxx Curl 7.72.0 Haxx Curl 7.73.0	170
Application	Netapp Netapp Clustered Data Ontap - Netapp Solidfire - Netapp HCI Management Node -	3
Application	Oracle Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Communications Billing AND Revenue Management 12.0.0.3.0 Oracle Essbase 21.2 Oracle Communications Cloud Native Core Policy 1.14.0	4
Application	Siemens Siemens Sinec Infrastructure Network Services - Siemens Sinec Infrastructure Network Services 1.0.1	2
Application	Splunk Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder 9.0.0 Splunk Universal Forwarder 9.0.1 Splunk Universal Forwarder 9.0.2 Splunk Universal Forwarder 9.0.3 Splunk Universal Forwarder 9.0.4 Splunk Universal Forwarder 9.0.5 Splunk Universal Forwarder 8.2.6 Splunk Universal Forwarder 8.2.7 Splunk Universal Forwarder 8.2.8 Splunk Universal Forwarder 8.2.9 Splunk Universal Forwarder 8.2.10 Splunk Universal Forwarder 8.2.11	13
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Netapp Netapp HCI Bootstrap OS -	1
OS	Apple Apple MAC OS X 10.15 Apple MAC OS X 10.15.1 Apple MAC OS X 10.15.2 Apple MAC OS X 10.15.3 Apple MAC OS X 10.15.4 Apple MAC OS X 10.15.5 Apple MAC OS X 10.15.6 Apple MAC OS X 10.14.0 Apple MAC OS X 10.14.1 Apple MAC OS X 10.14.2 Apple MAC OS X 10.14.3 Apple MAC OS X 10.14.4 Apple MAC OS X 10.14.5 Apple MAC OS X 10.14.6 Apple MAC OS X 10.15.7 Apple Macos 11.0.1 Apple Macos 11.1 Apple Macos 11.2	43
OS	Fujitsu Fujitsu M10 1 Firmware - Fujitsu M10 1 Firmware Xcp Fujitsu M10 1 Firmware Xcp2280 Fujitsu M10 1 Firmware Xcp2361 Fujitsu M10 1 Firmware Xcp2400 Fujitsu M10 1 Firmware Xcp2410 Fujitsu M10 1 Firmware Xcp3070 Fujitsu M10 1 Firmware Xcp3100 Fujitsu M10 4 Firmware - Fujitsu M10 4 Firmware Xcp Fujitsu M10 4 Firmware Xcp2280 Fujitsu M10 4 Firmware Xcp2361 Fujitsu M10 4 Firmware Xcp2400 Fujitsu M10 4 Firmware Xcp2410 Fujitsu M10 4 Firmware Xcp3070 Fujitsu M10 4 Firmware Xcp3100 Fujitsu M10 4S Firmware - Fujitsu M10 4S Firmware Xcp Fujitsu M10 4S Firmware Xcp2280 Fujitsu M10 4S Firmware Xcp2361 Fujitsu M10 4S Firmware Xcp2400 Fujitsu M10 4S Firmware Xcp2410 Fujitsu M10 4S Firmware Xcp3070 Fujitsu M10 4S Firmware Xcp3100 Fujitsu M12 1 Firmware - Fujitsu M12 1 Firmware Xcp2361 Fujitsu M12 1 Firmware Xcp2400 Fujitsu M12 1 Firmware Xcp2410 Fujitsu M12 1 Firmware Xcp3070 Fujitsu M12 1 Firmware Xcp3090 Fujitsu M12 1 Firmware Xcp3100 Fujitsu M12 2 Firmware - Fujitsu M12 2 Firmware Xcp2361 Fujitsu M12 2 Firmware Xcp2400 Fujitsu M12 2 Firmware Xcp2410 Fujitsu M12 2 Firmware Xcp3070 Fujitsu M12 2 Firmware Xcp3090 Fujitsu M12 2 Firmware Xcp3100 Fujitsu M12 2S Firmware - Fujitsu M12 2S Firmware Xcp2361 Fujitsu M12 2S Firmware Xcp2400 Fujitsu M12 2S Firmware Xcp2410 Fujitsu M12 2S Firmware Xcp3070 Fujitsu M12 2S Firmware Xcp3090 Fujitsu M12 2S Firmware Xcp3100	45
Hardware	Netapp Netapp HCI Storage Node - Netapp HCI Compute Node -	2
Hardware	Fujitsu Fujitsu M10 1 - Fujitsu M10 4 - Fujitsu M10 4S - Fujitsu M12 1 - Fujitsu M12 2 - Fujitsu M12 2S -	6

Vulnerabilities > CVE-2020-8284 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-8284"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-8284