CVE-2015-1419: vsftpd Remote Access Bypass
Summary
CVE-2015-1419: Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing. Affects vsftpd versions < 3.0.2-18. Fixed in 3.0.2-18. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
vsftpd is an open-source FTP server software for Unix-like systems. It provides secure, efficient, and easy-to-configure file transfer capabilities. However, versions 3.0.2 and earlier of vsftpd are vulnerable to an unspecified issue that allows remote attackers to bypass access restrictions.
Vulnerability Detail
The exact details of the vulnerability are unknown, but it is related to the parsing of deny_file. This vulnerability could potentially allow unauthorized access to restricted files or directories on the FTP server. The impact and potential ramifications of this vulnerability depend on the specific configuration and usage of the vsftpd server.
How To Fix
Minimum fixed version
3.0.2-18
This is the first release that contains the fix.
sudo apt-get install --only-upgrade vsftpdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vsftpd FTP server software versions 3.0.2 and earlier are vulnerable to a remote access bypass issue. It is recommended to update to version 3.0.2-18 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for vsftpd →
FAQ
vsftpd is an open-source FTP server software for Unix-like systems. It is known for its security, efficiency, and ease of configuration.
Versions 3.0.2 and earlier of vsftpd are affected by this vulnerability.
You can check the version of vsftpd installed on your system by running the command 'vsftpd -v' in the terminal.
No known exploits for this vulnerability have been reported at this time.
You can find more information about this vulnerability in the CVE-2015-1419 JSON report available at the following source: https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2015-1419.json
Related vulnerabilities
Recent vulnerabilities recorded for vsftpd.
