ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Netbsd | Netbsd | 1.4.2 (including) | 1.4.2 (including) |
References
