CVE-2020-9273

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.

En ProFTPD versión 1.3.7, es posible corromper los grupos de memoria mediante la interrupción del canal de transferencia de datos. Esto conlleva a un uso de la memoria previamente liberada en la función alloc_pool en el archivo pool.c, y una posible ejecución de código remota.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-02-19 CVE Reserved
2020-02-20 CVE Published
2023-06-21 First Exploit
2023-11-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-416: Use After Free

CAPEC

References (13)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2021/08/25/1	Mailing List
http://www.openwall.com/lists/oss-security/2021/09/06/2	Mailing List
https://cert-portal.siemens.com/productcert/pdf/ssa-679335.pdf	Third Party Advisory
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/issues/903	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00022.html	Mailing List
https://lists.debian.org/debian-lts-announce/2020/03/msg00002.html	Mailing List

URL	Date	SRC
https://github.com/ptef/CVE-2020-9273	2023-06-21

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00002.html	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCUPRYSJR7XOM3HQ6H5M4OGDU7OHCHBF	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHO3S5WPRRP7VGKIAHLYQVEYW5HRYIJN	2023-11-07
https://security.gentoo.org/glsa/202003-35	2023-11-07
https://www.debian.org/security/2020/dsa-4635	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"	Simatic Net Cp 1545-1 Firmware Search vendor "Siemens" for product "Simatic Net Cp 1545-1 Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic Net Cp 1545-1 Search vendor "Siemens" for product "Simatic Net Cp 1545-1"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic Net Cp 1543-1 Firmware Search vendor "Siemens" for product "Simatic Net Cp 1543-1 Firmware"	< 3.0 Search vendor "Siemens" for product "Simatic Net Cp 1543-1 Firmware" and version " < 3.0"	-	Affected	in	Siemens Search vendor "Siemens"	Simatic Net Cp 1543-1 Search vendor "Siemens" for product "Simatic Net Cp 1543-1"	-	-	Safe
Proftpd Search vendor "Proftpd"		Proftpd Search vendor "Proftpd" for product "Proftpd"				1.3.7 Search vendor "Proftpd" for product "Proftpd" and version "1.3.7"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				30 Search vendor "Fedoraproject" for product "Fedora" and version "30"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				31 Search vendor "Fedoraproject" for product "Fedora" and version "31"		-		Affected
Opensuse Search vendor "Opensuse"		Backports Sle Search vendor "Opensuse" for product "Backports Sle"				15.0 Search vendor "Opensuse" for product "Backports Sle" and version "15.0"		-		Affected
Opensuse Search vendor "Opensuse"		Backports Sle Search vendor "Opensuse" for product "Backports Sle"				15.0 Search vendor "Opensuse" for product "Backports Sle" and version "15.0"		sp1		Affected
Opensuse Search vendor "Opensuse"		Leap Search vendor "Opensuse" for product "Leap"				15.1 Search vendor "Opensuse" for product "Leap" and version "15.1"		-		Affected