TI-2024-32304 CVE-2024-48208 · GHSA-rrmj-qxgv-v296
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.
Priority HIGH 76
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.
Pureftpd
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Pureftpd records in CISA KEVNo Pureftpd vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Pure-ftpd · all components
TI-2011-01394 CVE-2011-1575 · GHSA-mqpg-5c3p-cx82
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly…
Priority MEDIUM 51
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleart…
TI-2017-08960 CVE-2017-12170 · GHSA-fmmm-v7h7-fpx9
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging…
Priority MEDIUM 45
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration.
TI-2020-07487 CVE-2020-9365 · GHSA-3863-h4xw-2xv3
An issue was discovered in Pure-FTPd 1.0.49.
Priority MEDIUM 43
An issue was discovered in Pure-FTPd 1.0.49.
TI-2020-07415 CVE-2020-9274 · GHSA-26hm-gghq-x5rr
An issue was discovered in Pure-FTPd 1.0.49.
Priority MEDIUM 42
An issue was discovered in Pure-FTPd 1.0.49.
TI-2021-17564 CVE-2021-40524 · GHSA-p53v-96v3-p5jg
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server…
Priority MEDIUM 40
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang.
TI-2020-17954 CVE-2020-35359 · GHSA-w7rv-vxq3-894m
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making…
Priority MEDIUM 40
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.
TI-2019-14551 CVE-2019-20176 · GHSA-fgwh-frh9-vm43
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
Priority MEDIUM 40
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
TI-2011-00349 CVE-2011-0418 · GHSA-g8vx-5jmv-rgqx
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not…
Priority LOW 29
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory…
TI-2011-00849 CVE-2011-0988 · GHSA-fcmr-8hmm-9f43
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise…
Priority LOW 20
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overw…
TI-2011-02801 CVE-2011-3171 · GHSA-r9x3-69v2-2pq2
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when…
Priority LOW 18
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled,…