CVE-2021-40491

The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.

References

Affected packages

Git / github.com/identitypython/pysaml2

Affected ranges

Type: GIT
Repo: https://github.com/identitypython/pysaml2
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c2e1ca95f4849dd4fa23c74032807e9adbcdd9b0

Affected versions

0.*

0.1

0.2

0.4

0.4.1

0.4.2

1.*

1.0.0

1.0.1

2.*

2.0.0

2.1.0

v1.*

v1.0.3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-40491.json"