cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-40303,https://securityvulnerability.io/vulnerability/CVE-2023-40303,Privilege Escalation Vulnerability in GNU Inetutils Products,"GNU Inetutils, through version 2.4, contains a vulnerability that allows for privilege escalation due to the lack of validation on the return values of the set*id() family of functions within several components such as ftpd, rcp, rlogin, rsh, rshd, and uucpd. This issue can be exploited when a process attempts to drop privileges, as failures in the setuid system call could lead to situations where an ordinary user inadvertently gains control over the process, leading to potential unauthorized actions.",Gnu,Inetutils,7.8,HIGH,0.00046999999904073775,false,false,false,false,,false,false,2023-08-14T05:15:00.000Z,0 CVE-2022-39028,https://securityvulnerability.io/vulnerability/CVE-2022-39028,,"telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a ""telnet/tcp server failing (looping), service terminated"" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.",Gnu,Inetutils,7.5,HIGH,0.002570000011473894,false,false,false,false,,false,false,2022-08-30T00:00:00.000Z,0 CVE-2021-40491,https://securityvulnerability.io/vulnerability/CVE-2021-40491,,The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.,Gnu,Inetutils,6.5,MEDIUM,0.0013599999947473407,false,false,false,false,,false,false,2021-09-03T00:00:00.000Z,0