[ GLSA 202007-51 ] FileZilla

[GLSA]

Gentoo Linux Security Advisory

Title: FileZilla: Untrusted search path (GLSA 202007-51)
Severity: normal
Exploitable: remote
Date: 2020-07-27
Bug(s): #717726
ID: 202007-51

Synopsis

A vulnerability was found in FileZilla which might allow privilege
escalation.


Background

FileZilla is an open source FTP client.

Affected Packages

Package: net-ftp/filezilla
Vulnerable: < 3.47.2.1
Unaffected: >= 3.47.2.1
Architectures: All supported architectures


Description

It was discovered that FileZilla uses an untrusted search path.

Impact

An attacker could use a malicious binary to escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All FileZilla users should upgrade to the latest version: