CVE-2019-5429
Published Apr 29, 2019
·Updated
Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.
Affected Software
3 affected components
Filezilla-project Filezilla Client<3.41.0
Debian Debian Linux=9.0
Fedoraproject Fedora=28
Remediation
Event History
Apr 29, 2019
CVE Published
via MITRE·02:13 PM
Data Sourced
via MITRE·02:13 PM
DescriptionWeakness
Data Sourced
via NVD·03:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-5429?
CVE-2019-5429 is considered a high-severity vulnerability due to the potential privilege escalation it allows.
2
How do I fix CVE-2019-5429?
To fix CVE-2019-5429, update to FileZilla version 3.41.0 or later.
3
Who is affected by CVE-2019-5429?
Users of FileZilla versions prior to 3.41.0, as well as certain distributions like Debian 9.0 and Fedora 28, are affected by CVE-2019-5429.
4
What type of attack does CVE-2019-5429 enable?
CVE-2019-5429 enables attackers to execute malicious code with elevated privileges through a compromised 'fzsftp' binary.
5
Is the version 3.41.0-rc1 of FileZilla safe against CVE-2019-5429?
Yes, version 3.41.0-rc1 of FileZilla addresses the security issues related to CVE-2019-5429.