CVE-2023-24042

Published: 21/01/2023 Updated: 30/01/2023

CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6

VMScore: 0

A race condition in LightFTP up to and including 2.2 allows an malicious user to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.

Vulnerable Product	Search on Vulmon	Subscribe to Product
lightftp project lightftp

INSE6140-Project - Exploring and patching directory traversal vulnerability of LightFTP server LightFTP Directory Traversal Patch This repository contains our work on identifying and patching a directory traversal vulnerability in the LightFTP server, specifically targeted at CVE-2023-24042 Our project was completed as part of the coursework for INSE6140, Winter 2024 About Li

CWE-362 https://github.com/hfiref0x/LightFTP/issues/25 https://nvd.nist.gov https://github.com/RoyTonmoy/Vulnerability-of-LightFTP-2.2

CVE-2023-24042

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect