Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

pureftpd pure-ftpd 0.98.2a vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2011-0418

The glob implementation in Pure-FTPd prior to 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.
Pureftpd Pure-ftpd 0.97-finalPureftpd Pure-ftpd 1.0.19Pureftpd Pure-ftpd 1.0.10Pureftpd Pure-ftpd 0.97pre1Pureftpd Pure-ftpd 0.98-finalPureftpd Pure-ftpd 0.95Pureftpd Pure-ftpd 0.97pre4Pureftpd Pure-ftpd 0.98.2aPureftpd Pure-ftpd 1.0.6Pureftpd Pure-ftpd 0.97.3Pureftpd Pure-ftpd 0.97pre3Pureftpd Pure-ftpd 0.96.1Pureftpd Pure-ftpd 1.0.15Pureftpd Pure-ftpd 1.0.9Pureftpd Pure-ftpd 0.97.7pre1Pureftpd Pure-ftpd 0.97.5Pureftpd Pure-ftpd 1.0.26Pureftpd Pure-ftpd 0.95-pre3Pureftpd Pure-ftpd 1.0.24Pureftpd Pure-ftpd 0.98pre2Pureftpd Pure-ftpd 0.99pre2Pureftpd Pure-ftpd 0.97pre2
NA

CVE-2011-1575

The STARTTLS implementation in ftp_parser.c in Pure-FTPd prior to 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place,...
Pureftpd Pure-ftpd 0.97-finalPureftpd Pure-ftpd 1.0.19Pureftpd Pure-ftpd 1.0.10Pureftpd Pure-ftpd 0.97pre1Pureftpd Pure-ftpd 0.98-finalPureftpd Pure-ftpd 0.95Pureftpd Pure-ftpd 0.97pre4Pureftpd Pure-ftpd 0.98.2aPureftpd Pure-ftpd 1.0.6Pureftpd Pure-ftpd 0.97.3Pureftpd Pure-ftpd 0.97pre3Pureftpd Pure-ftpd 0.96.1Pureftpd Pure-ftpd 1.0.15Pureftpd Pure-ftpd 1.0.9Pureftpd Pure-ftpd 0.97.7pre1Pureftpd Pure-ftpd 0.97.5Pureftpd Pure-ftpd 1.0.26Pureftpd Pure-ftpd 0.95-pre3Pureftpd Pure-ftpd 1.0.24Pureftpd Pure-ftpd 0.98pre2Pureftpd Pure-ftpd 0.99pre2Pureftpd Pure-ftpd 0.97pre2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook