Read the docs
TI-2004-00597 Aliases CVE-2004-0656GHSA-g7m6-w6x3-gg99

The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.

Why it matters now

EPSS 0.02329 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:a:pureftpd:pureftpd:0.96:*:*:*:*:*:*:*0.96VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0:*:*:*:*:*:*:*1.0VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.1:*:*:*:*:*:*:*1.0.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.2:*:*:*:*:*:*:*1.0.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.3:*:*:*:*:*:*:*1.0.3VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.4:*:*:*:*:*:*:*1.0.4VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.5:*:*:*:*:*:*:*1.0.5VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.11:*:*:*:*:*:*:*1.0.11VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.12:*:*:*:*:*:*:*1.0.12VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.13a:*:*:*:*:*:*:*1.0.13aVulnerablePureftpd
  • cpe:2.3:a:pureftpd:pureftpd:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.13a:*:*:*:*:*:*:* Versions 1.0.13a Vulnerable ·Pureftpd
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:pureftpd:pureftpd:1.0.14:*:*:*:*:*:*:*1.0.14VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.15:*:*:*:*:*:*:*1.0.15VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.16:*:*:*:*:*:*:*1.0.16VulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.16a:*:*:*:*:*:*:*1.0.16aVulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.16b:*:*:*:*:*:*:*1.0.16bVulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.16c:*:*:*:*:*:*:*1.0.16cVulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.17a:*:*:*:*:*:*:*1.0.17aVulnerablePureftpd
cpe:2.3:a:pureftpd:pureftpd:1.0.18:*:*:*:*:*:*:*1.0.18VulnerablePureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.16a:*:*:*:*:*:*:* Versions 1.0.16a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.16b:*:*:*:*:*:*:* Versions 1.0.16b Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.16c:*:*:*:*:*:*:* Versions 1.0.16c Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.17a:*:*:*:*:*:*:* Versions 1.0.17a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pureftpd:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·Pureftpd

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0656
  2. 2026-10-03 Alias added: GHSA-g7m6-w6x3-gg99

References

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences