Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.
| Software | From | Fixed in |
|---|---|---|
| trolltech / trollftpd | 1.24 | 1.24.x |
| trolltech / trollftpd | 1.22 | 1.22.x |
| trolltech / trollftpd | 1.19 | 1.19.x |
| trolltech / trollftpd | 1.21 | 1.21.x |
| trolltech / trollftpd | 1.23 | 1.23.x |
| trolltech / trollftpd | 1.25 | 1.25.x |
| trolltech / trollftpd | 1.18 | 1.18.x |
| trolltech / trollftpd | 1.20 | 1.20.x |
| trolltech / trollftpd | 1.17 | 1.17.x |
| trolltech / trollftpd | 1.26 | 1.26.x |