IM
IronMonkey Threat Research

CVE-2020-8284 MEDIUM

Published: 2020-12-14 | Last Modified: 2026-04-16 | Status: Modified

Description

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

Additional Descriptions (1)

Un servidor malicioso puede usar la respuesta FTP PASV para engañar a curl versiones 7.73.0 y anteriores, para que se conecte de nuevo a una dirección IP y puerto determinados, y de esta manera potencialmente hacer que curl extraiga información sobre servicios que de otro modo serían privados y no divulgados, por ejemplo, haciendo escaneo de puerto y extracciones del banner de servicio

CVSS Metrics

Base Score: 3.7 (LOW)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.2

Impact Score: 1.4

Base Score: 4.3 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-200
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
haxx curl * <built-in method update of dict object at 0x7fd34122c300> Application
fedoraproject fedora 32 <built-in method update of dict object at 0x7fd34122c040> Operating System
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd36b7d77c0> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd384317040> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd34122d640> Operating System
netapp clustered_data_ontap - <built-in method update of dict object at 0x7fd34122fa80> Application
netapp hci_management_node - <built-in method update of dict object at 0x7fd3855dae00> Application
netapp solidfire - <built-in method update of dict object at 0x7fd34122e780> Application
netapp hci_storage_node - <built-in method update of dict object at 0x7fd36a02fa40> Hardware
netapp hci_bootstrap_os - <built-in method update of dict object at 0x7fd34122f900> Operating System
apple mac_os_x * <built-in method update of dict object at 0x7fd36aad0040> Operating System
apple mac_os_x * <built-in method update of dict object at 0x7fd34122db00> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36945d4c0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd384a66000> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd3841f1940> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36945ca00> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd34122ce00> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd3697d7700> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd369ee8c00> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36945f000> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd3855db800> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd34122ddc0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36945ffc0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd34122f700> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd384e2bbc0> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd3697d5a00> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36b7d4800> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36a9ae280> Operating System
apple mac_os_x 10.14.6 <built-in method update of dict object at 0x7fd36945ff40> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36a9acfc0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd34122ea40> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36945d380> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36aad17c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd319c750c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd34b9943c0> Operating System
apple mac_os_x 10.15.7 <built-in method update of dict object at 0x7fd36afa66c0> Operating System
apple macos 11.0.1 <built-in method update of dict object at 0x7fd36afa7a40> Operating System
apple macos 11.1 <built-in method update of dict object at 0x7fd36afa7900> Operating System
apple macos 11.2 <built-in method update of dict object at 0x7fd36afa6800> Operating System
oracle communications_billing_and_revenue_management 12.0.0.3.0 <built-in method update of dict object at 0x7fd36afa7fc0> Application
oracle communications_cloud_native_core_policy 1.14.0 <built-in method update of dict object at 0x7fd2d825a940> Application
oracle essbase 21.2 <built-in method update of dict object at 0x7fd384314bc0> Application
oracle peoplesoft_enterprise_peopletools 8.58 <built-in method update of dict object at 0x7fd38551e140> Application
fujitsu m10-1_firmware * <built-in method update of dict object at 0x7fd369ee8240> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x7fd3855da4c0> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x7fd3855db900> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x7fd39c47bc80> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x7fd369ee9e80> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x7fd3842106c0> Operating System
fujitsu m10-1_firmware * <built-in method update of dict object at 0x7fd340893f00> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x7fd2d3b93780> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x7fd3841f12c0> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x7fd3697d6480> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x7fd36ad4dd00> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x7fd3854bc500> Operating System
siemens sinec_infrastructure_network_services * <built-in method update of dict object at 0x7fd34b996d00> Application
splunk universal_forwarder * <built-in method update of dict object at 0x7fd39c4a4640> Application
splunk universal_forwarder * <built-in method update of dict object at 0x7fd38551cf80> Application
splunk universal_forwarder 9.1.0 <built-in method update of dict object at 0x7fd39c4a7040> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
Yes cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:11.0.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:11.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:11.2:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*

References