CVE-2025-11947 (CNNVD-202510-2555)
中文标题:
bftpd 安全漏洞
英文标题:
bftpd Configuration File options.c expand_groups heap-based overflow
漏洞描述
中文描述:
Bftpd是一款FTP（文件传输协议）服务器。 bftpd 6.2及之前版本存在安全漏洞，该漏洞源于组件Configuration File Handler的文件options.c中函数expand_groups存在堆缓冲区溢出，可能导致本地主机攻击。
英文描述:
A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CWE类型:
标签:
受影响产品
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
cve.org
cve.org
cve.org
CVSS评分详情
4.0 (cna)
LOWCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1 (cna)
MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0 (cna)
MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0 (cna)
LOWAV:L/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-11947 |
2025-11-11 15:23:03 | 2025-11-11 07:40:06 |
| NVD | nvd_CVE-2025-11947 |
2025-11-11 15:01:06 | 2025-11-11 07:47:56 |
| CNNVD | cnnvd_CNNVD-202510-2555 |
2025-11-11 15:12:30 | 2025-11-11 08:00:18 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202510-2555
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']