Ftpserverlib
Monthly
Cleartext transmission in fclairamb/ftpserverlib through 0.32.4 lets an on-path attacker read or modify transferred file contents and directory listings even when the server enforces encrypted data transfers. The flaw is reachable by a client that prepares a data connection with PASV or PORT while a cleartext protection level is in force and only then issues PROT P, because TransferOpen trusts the transferTLS flag instead of inspecting whether the prepared connection is actually a TLS connection; no authentication or user interaction is needed, but the attacker must already hold a man-in-the-middle position on the data channel. Severity is medium (assessed CVSS 3.1 AV:N/AC:H/PR:N/UI:N/C:L/I:L/A:N), EPSS is negligible at 0.09% with no KEV listing and no public exploit identified at time of analysis, and an upstream fix is proposed in pull request 685.
Cleartext transmission in fclairamb/ftpserverlib through 0.32.4 lets an on-path attacker read or modify transferred file contents and directory listings even when the server enforces encrypted data transfers. The flaw is reachable by a client that prepares a data connection with PASV or PORT while a cleartext protection level is in force and only then issues PROT P, because TransferOpen trusts the transferTLS flag instead of inspecting whether the prepared connection is actually a TLS connection; no authentication or user interaction is needed, but the attacker must already hold a man-in-the-middle position on the data channel. Severity is medium (assessed CVSS 3.1 AV:N/AC:H/PR:N/UI:N/C:L/I:L/A:N), EPSS is negligible at 0.09% with no KEV listing and no public exploit identified at time of analysis, and an upstream fix is proposed in pull request 685.