Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The fclairamb ftpserverlib library, which is used to build FTP servers, is affected. When a client requests encrypted data transfers but the connection is not actually set up with TLS, file contents and directory listings are sent unencrypted, allowing attackers positioned on the network path to read or alter them.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- fclairamb ftpserverlib
through 0.32.4
- Syncplify, Inc. Syncplify Server!
through 8.8.0