psftp records

4 published records for vendor psftp.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2017-15271Proof of concept	A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729.psftp · psftpd · CWE-416 Pre-auth Memory safety Race condition	Medium5.9	—	8.7%	Nov 15, 2017
23Monitor	CVE-2017-15270Proof of concept	The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file.psftp · psftpd · CWE-20 Pre-auth	Medium5.3	—	7.0%	Nov 15, 2017
21Monitor	CVE-2017-15272No exploit	The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat.psftp · psftpd · CWE-287 Auth bypass	Medium5.3	—	0.6%	Nov 15, 2017
17Monitor	CVE-2017-15269No exploit	The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default.psftp · psftpd · CWE-610	Medium4.3	—	1.5%	Nov 15, 2017

CVE-2017-15271
26Monitor
A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729.
MediumCVSS 5.9Proof of conceptEPSS 9%
psftp · psftpdNov 15, 2017
CVE-2017-15270
23Monitor
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file.
MediumCVSS 5.3Proof of conceptEPSS 7%
- Pre-auth
psftp · psftpdNov 15, 2017
CVE-2017-15272
21Monitor
The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat.
MediumCVSS 5.3No exploitEPSS 1%
- Auth bypass
psftp · psftpdNov 15, 2017
CVE-2017-15269
17Monitor
The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default.
MediumCVSS 4.3No exploitEPSS 2%
psftp · psftpdNov 15, 2017