CVEvulnerability

CVE-2012-6095

1.2 LOW Published 2013-01-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-362

Description

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.

Affected configurations

• proftpd proftpd (<= 1.3.4) • proftpd proftpd 1.2.0 • proftpd proftpd 1.2.1 • proftpd proftpd 1.2.2 • proftpd proftpd 1.2.3 • proftpd proftpd 1.2.4 • proftpd proftpd 1.2.5 • proftpd proftpd 1.2.6 • proftpd proftpd 1.2.7 • proftpd proftpd 1.2.8 • proftpd proftpd 1.2.9 • proftpd proftpd 1.2.10 • proftpd proftpd 1.3.0 • proftpd proftpd 1.3.1 • proftpd proftpd 1.3.2 • proftpd proftpd 1.3.3 • proftpd proftpd 1.3.4

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References