ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux-ftpd-ssl linux-ftpd-ssl 0.17 |