Threats tagged 'ghsa-j2x3-vcc8-r98q'

Fclairamb ftpserverlib versions through 0.32.4 have a vulnerability where file contents and directory listings can be transmitted in cleartext despite mandatory encryption settings. This occurs because the TransferOpen function only checks the transferTLS flag set by the PROT command, not whether the actual data connection uses TLS. An attacker on the network path can read or modify transferred data when a client sends PROT P after PASV or PORT commands.