Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

pureftpd pure-ftpd 0.98 vulnerabilities and exploits

(subscribe to this query)
320
VMScore

CVE-2011-3171

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown...
Pureftpd Pure-ftpdPureftpd Pure-ftpd 0.90Pureftpd Pure-ftpd 0.91Pureftpd Pure-ftpd 0.92Pureftpd Pure-ftpd 0.93Pureftpd Pure-ftpd 0.94Pureftpd Pure-ftpd 0.95Pureftpd Pure-ftpd 0.95.1Pureftpd Pure-ftpd 0.95.2Pureftpd Pure-ftpd 0.96Pureftpd Pure-ftpd 0.96.1Pureftpd Pure-ftpd 0.97Pureftpd Pure-ftpd 0.97-finalPureftpd Pure-ftpd 0.97.1Pureftpd Pure-ftpd 0.97.2Pureftpd Pure-ftpd 0.97.3Pureftpd Pure-ftpd 0.97.4Pureftpd Pure-ftpd 0.97.5Pureftpd Pure-ftpd 0.97.6Pureftpd Pure-ftpd 0.97.7Pureftpd Pure-ftpd 0.98Pureftpd Pure-ftpd 0.98.1
405
VMScore

CVE-2011-0418

The glob implementation in Pure-FTPd prior to 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.
Pureftpd Pure-ftpd 0.97-finalPureftpd Pure-ftpd 1.0.19Pureftpd Pure-ftpd 1.0.10Pureftpd Pure-ftpd 0.97pre1Pureftpd Pure-ftpd 0.98-finalPureftpd Pure-ftpd 0.95Pureftpd Pure-ftpd 0.97pre4Pureftpd Pure-ftpd 0.98.2aPureftpd Pure-ftpd 1.0.6Pureftpd Pure-ftpd 0.97.3Pureftpd Pure-ftpd 0.97pre3Pureftpd Pure-ftpd 0.96.1Pureftpd Pure-ftpd 1.0.15Pureftpd Pure-ftpd 1.0.9Pureftpd Pure-ftpd 0.97.7pre1Pureftpd Pure-ftpd 0.97.5Pureftpd Pure-ftpd 1.0.26Pureftpd Pure-ftpd 0.95-pre3Pureftpd Pure-ftpd 1.0.24Pureftpd Pure-ftpd 0.98pre2Pureftpd Pure-ftpd 0.99pre2Pureftpd Pure-ftpd 0.97pre2
516
VMScore

CVE-2011-1575

The STARTTLS implementation in ftp_parser.c in Pure-FTPd prior to 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place,...
Pureftpd Pure-ftpd 0.97-finalPureftpd Pure-ftpd 1.0.19Pureftpd Pure-ftpd 1.0.10Pureftpd Pure-ftpd 0.97pre1Pureftpd Pure-ftpd 0.98-finalPureftpd Pure-ftpd 0.95Pureftpd Pure-ftpd 0.97pre4Pureftpd Pure-ftpd 0.98.2aPureftpd Pure-ftpd 1.0.6Pureftpd Pure-ftpd 0.97.3Pureftpd Pure-ftpd 0.97pre3Pureftpd Pure-ftpd 0.96.1Pureftpd Pure-ftpd 1.0.15Pureftpd Pure-ftpd 1.0.9Pureftpd Pure-ftpd 0.97.7pre1Pureftpd Pure-ftpd 0.97.5Pureftpd Pure-ftpd 1.0.26Pureftpd Pure-ftpd 0.95-pre3Pureftpd Pure-ftpd 1.0.24Pureftpd Pure-ftpd 0.98pre2Pureftpd Pure-ftpd 0.99pre2Pureftpd Pure-ftpd 0.97pre2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook