CVE-2017-7418 Common Vulnerabilities and Exposures

Upstream information

CVE-2017-7418 at MITRE

Description

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	2.1
Vector	AV:L/AC:L/Au:N/C:N/I:P/A:N
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	Partial
Availability Impact	None

CVSS v3 Scores
	National Vulnerability Database
Base Score	5.5
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality Impact	None
Integrity Impact	High
Availability Impact	None
CVSSv3 Version	3

SUSE Bugzilla entry: 1032443 [RESOLVED / FIXED]

SUSE Security Advisories:

openSUSE-SU-2019:1836-1, published Fri Dec 8 15:48:42 2023
openSUSE-SU-2019:1870-1, published Fri Dec 8 15:48:42 2023
openSUSE-SU-2020:0031-1, published Thu Dec 7 12:55:39 2023

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Package Hub 15 SP1	`proftpd >= 1.3.6b-bp151.4.6.2` `proftpd-devel >= 1.3.6b-bp151.4.6.2` `proftpd-doc >= 1.3.6b-bp151.4.6.2` `proftpd-lang >= 1.3.6b-bp151.4.6.2` `proftpd-ldap >= 1.3.6b-bp151.4.6.2` `proftpd-mysql >= 1.3.6b-bp151.4.6.2` `proftpd-pgsql >= 1.3.6b-bp151.4.6.2` `proftpd-radius >= 1.3.6b-bp151.4.6.2` `proftpd-sqlite >= 1.3.6b-bp151.4.6.2`	Patchnames: openSUSE-2019-1870 openSUSE-2020-31
SUSE Package Hub 15	`proftpd >= 1.3.6b-bp150.3.6.1` `proftpd-devel >= 1.3.6b-bp150.3.6.1` `proftpd-doc >= 1.3.6b-bp150.3.6.1` `proftpd-lang >= 1.3.6b-bp150.3.6.1` `proftpd-ldap >= 1.3.6b-bp150.3.6.1` `proftpd-mysql >= 1.3.6b-bp150.3.6.1` `proftpd-pgsql >= 1.3.6b-bp150.3.6.1` `proftpd-radius >= 1.3.6b-bp150.3.6.1` `proftpd-sqlite >= 1.3.6b-bp150.3.6.1`	Patchnames: openSUSE-2019-1836 openSUSE-2020-31
openSUSE Leap 15.0	`proftpd >= 1.3.5e-lp150.2.3.1` `proftpd-devel >= 1.3.5e-lp150.2.3.1` `proftpd-doc >= 1.3.5e-lp150.2.3.1` `proftpd-lang >= 1.3.5e-lp150.2.3.1` `proftpd-ldap >= 1.3.5e-lp150.2.3.1` `proftpd-mysql >= 1.3.5e-lp150.2.3.1` `proftpd-pgsql >= 1.3.5e-lp150.2.3.1` `proftpd-radius >= 1.3.5e-lp150.2.3.1` `proftpd-sqlite >= 1.3.5e-lp150.2.3.1`	Patchnames: openSUSE-2019-1836
openSUSE Leap 15.1	`proftpd >= 1.3.6b-lp151.3.6.1` `proftpd-devel >= 1.3.6b-lp151.3.6.1` `proftpd-doc >= 1.3.6b-lp151.3.6.1` `proftpd-lang >= 1.3.6b-lp151.3.6.1` `proftpd-ldap >= 1.3.6b-lp151.3.6.1` `proftpd-mysql >= 1.3.6b-lp151.3.6.1` `proftpd-pgsql >= 1.3.6b-lp151.3.6.1` `proftpd-radius >= 1.3.6b-lp151.3.6.1` `proftpd-sqlite >= 1.3.6b-lp151.3.6.1`	Patchnames: openSUSE-2019-1836 openSUSE-2020-31
openSUSE Tumbleweed	`proftpd >= 1.3.6e-1.10` `proftpd-devel >= 1.3.6e-1.10` `proftpd-doc >= 1.3.6e-1.10` `proftpd-lang >= 1.3.6e-1.10` `proftpd-ldap >= 1.3.6e-1.10` `proftpd-mysql >= 1.3.6e-1.10` `proftpd-pgsql >= 1.3.6e-1.10` `proftpd-radius >= 1.3.6e-1.10` `proftpd-sqlite >= 1.3.6e-1.10`	Patchnames: openSUSE Tumbleweed GA proftpd-1.3.6e-1.10

SUSE Timeline for this CVE

CVE page created: Tue Apr 4 21:15:52 2017
CVE page last modified: Fri Dec 8 17:13:31 2023