CVE-2017-15270

moderate-risk
Published 2017-11-15

The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' and '\r' are not escaped and can be used to add new entries to the log.

Do I need to act?

!
14.0% chance of exploitation in next 30 days
EPSS score — higher than 86% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
43144
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Psftp

References (8)

Third Party Advisory http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Bui...
http://www.securityfocus.com/archive/1/541518/100/0/threaded
Third Party Advisory https://www.exploit-db.com/exploits/43144/
Third Party Advisory https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
Third Party Advisory http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Bui...
http://www.securityfocus.com/archive/1/541518/100/0/threaded
Third Party Advisory https://www.exploit-db.com/exploits/43144/
Third Party Advisory https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
38
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 12/34 · Low
Exposure 5/34 · Minimal