UBUNTU-CVE-2026-119568: Critical severity ubuntu/vsftpd vulnerability
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssldataaccept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Ubuntu systems running vsftpd through version 3.0.5 are in scope. Exploitation concerns FTPS passive-mode data connections and requires the attacker to share the victim's source IP address.
What must an attacker do to exploit the vulnerability?
The attacker must first obtain their own TLS session ticket by using AUTH TLS, then connect to the victim's PASV port while sharing the victim's source IP. No prior authentication or user interaction is required.
What can a successful attacker do?
An attacker can hijack an FTPS data connection, allowing them to steal downloaded data or inject data into uploads. The reported impact includes high confidentiality and integrity impact, with no availability impact stated.