Vulnerabilities > Troglobit > Uftpd > 2.11

DATE CVE VULNERABILITY TITLE RISK
2020-06-15 CVE-2020-14149 NULL Pointer Dereference vulnerability in Troglobit Uftpd
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /..
network
low complexity
troglobit CWE-476
7.5