Vulnerability in Proftpd

CVE-2017-7418

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.

EPSS: 0.004 (34.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

  • Proftpd — versions 1.3.6
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (vendor-advisory, x_refsource_SUSE)
  • cve@mitre.org (vendor-advisory, x_refsource_SUSE)
  • cve@mitre.org (vendor-advisory, x_refsource_SUSE)

Frequently asked questions

What is CVE-2017-7418?
CVE-2017-7418 is a medium-severity vulnerability in Proftpd, classified under Improper Link Resolution Before File Access. CVSS score: 5.5/10. Published 2017-04-04.
How severe is CVE-2017-7418?
Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2017-7418 known to be exploited?
13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.