Description
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
fclairamb ftpserverlib
Default version status: unaffected
0 to ≤ 0.32.4affected
pkg:golang/github.com/fclairamb/ftpserverlibSyncplify, Inc. Syncplify Server!
Default version status: unaffected
0 to ≤ 8.8.0affected
References
- https://github.com/fclairamb/ftpserverlib/pull/685 ↗
- https://github.com/fclairamb/ftpserverlib/blob/v0.32.4/handle_misc.go#L29-L31 ↗
- https://github.com/fclairamb/ftpserverlib/blob/v0.32.4/client_handler.go#L720 ↗
- https://www.vulncheck.com/advisories/fclairamb-ftpserverlib-through-0.32.4-cleartext-ftpes-data-transfer-via-prot-p ↗