Read the docs
TI-2011-01394 Aliases CVE-2011-1575GHSA-mqpg-5c3p-cx82

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly…

Priority MEDIUM 51CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

Why it matters now

EPSS 0.33341 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 87

CPEVersionsRoleVendor
cpe:2.3:a:pureftpd:pure-ftpd:*:*:*:*:*:*:*:*up to 1.0.29VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.90:*:*:*:*:*:*:*0.90VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.91:*:*:*:*:*:*:*0.91VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.92:*:*:*:*:*:*:*0.92VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.93:*:*:*:*:*:*:*0.93VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.94:*:*:*:*:*:*:*0.94VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95:*:*:*:*:*:*:*0.95VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre1:*:*:*:*:*:*:*0.95-pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre2:*:*:*:*:*:*:*0.95-pre2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre3:*:*:*:*:*:*:*0.95-pre3VulnerablePureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:*:*:*:*:*:*:*:* Versions up to 1.0.29 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre1:*:*:*:*:*:*:* Versions 0.95-pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre2:*:*:*:*:*:*:* Versions 0.95-pre2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre3:*:*:*:*:*:*:* Versions 0.95-pre3 Vulnerable ·Pureftpd
Show 77 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre4:*:*:*:*:*:*:*0.95-pre4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95.1:*:*:*:*:*:*:*0.95.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.95.2:*:*:*:*:*:*:*0.95.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.96:*:*:*:*:*:*:*0.96VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.96.1:*:*:*:*:*:*:*0.96.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.96pre1:*:*:*:*:*:*:*0.96pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97-final:*:*:*:*:*:*:*0.97-finalVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.1:*:*:*:*:*:*:*0.97.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.2:*:*:*:*:*:*:*0.97.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.3:*:*:*:*:*:*:*0.97.3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.4:*:*:*:*:*:*:*0.97.4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.5:*:*:*:*:*:*:*0.97.5VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.6:*:*:*:*:*:*:*0.97.6VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.7:*:*:*:*:*:*:*0.97.7VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre1:*:*:*:*:*:*:*0.97.7pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre2:*:*:*:*:*:*:*0.97.7pre2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre3:*:*:*:*:*:*:*0.97.7pre3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97pre1:*:*:*:*:*:*:*0.97pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97pre2:*:*:*:*:*:*:*0.97pre2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97pre3:*:*:*:*:*:*:*0.97pre3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97pre4:*:*:*:*:*:*:*0.97pre4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.97pre5:*:*:*:*:*:*:*0.97pre5VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98-final:*:*:*:*:*:*:*0.98-finalVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.1:*:*:*:*:*:*:*0.98.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.2:*:*:*:*:*:*:*0.98.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.2a:*:*:*:*:*:*:*0.98.2aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.3:*:*:*:*:*:*:*0.98.3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.4:*:*:*:*:*:*:*0.98.4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.5:*:*:*:*:*:*:*0.98.5VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.6:*:*:*:*:*:*:*0.98.6VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98.7:*:*:*:*:*:*:*0.98.7VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98pre1:*:*:*:*:*:*:*0.98pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.98pre2:*:*:*:*:*:*:*0.98pre2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99:*:*:*:*:*:*:*0.99VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.1:*:*:*:*:*:*:*0.99.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.1a:*:*:*:*:*:*:*0.99.1aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.1b:*:*:*:*:*:*:*0.99.1bVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.2:*:*:*:*:*:*:*0.99.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.2a:*:*:*:*:*:*:*0.99.2aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.3:*:*:*:*:*:*:*0.99.3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.4:*:*:*:*:*:*:*0.99.4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99.9:*:*:*:*:*:*:*0.99.9VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99a:*:*:*:*:*:*:*0.99aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99b:*:*:*:*:*:*:*0.99bVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99pre1:*:*:*:*:*:*:*0.99pre1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:0.99pre2:*:*:*:*:*:*:*0.99pre2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.0:*:*:*:*:*:*:*1.0.0VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.1:*:*:*:*:*:*:*1.0.1VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.2:*:*:*:*:*:*:*1.0.2VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.3:*:*:*:*:*:*:*1.0.3VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.4:*:*:*:*:*:*:*1.0.4VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.5:*:*:*:*:*:*:*1.0.5VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.6:*:*:*:*:*:*:*1.0.6VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.7:*:*:*:*:*:*:*1.0.7VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.8:*:*:*:*:*:*:*1.0.8VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.9:*:*:*:*:*:*:*1.0.9VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.10:*:*:*:*:*:*:*1.0.10VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.11:*:*:*:*:*:*:*1.0.11VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.12:*:*:*:*:*:*:*1.0.12VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.13a:*:*:*:*:*:*:*1.0.13aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.14:*:*:*:*:*:*:*1.0.14VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.15:*:*:*:*:*:*:*1.0.15VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.16a:*:*:*:*:*:*:*1.0.16aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.16b:*:*:*:*:*:*:*1.0.16bVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.16c:*:*:*:*:*:*:*1.0.16cVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.17:*:*:*:*:*:*:*1.0.17VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.17a:*:*:*:*:*:*:*1.0.17aVulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.18:*:*:*:*:*:*:*1.0.18VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.19:*:*:*:*:*:*:*1.0.19VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.20:*:*:*:*:*:*:*1.0.20VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.21:*:*:*:*:*:*:*1.0.21VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.22:*:*:*:*:*:*:*1.0.22VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.24:*:*:*:*:*:*:*1.0.24VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.25:*:*:*:*:*:*:*1.0.25VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.26:*:*:*:*:*:*:*1.0.26VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.27:*:*:*:*:*:*:*1.0.27VulnerablePureftpd
cpe:2.3:a:pureftpd:pure-ftpd:1.0.28:*:*:*:*:*:*:*1.0.28VulnerablePureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre4:*:*:*:*:*:*:* Versions 0.95-pre4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95.1:*:*:*:*:*:*:* Versions 0.95.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.95.2:*:*:*:*:*:*:* Versions 0.95.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.96.1:*:*:*:*:*:*:* Versions 0.96.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.96pre1:*:*:*:*:*:*:* Versions 0.96pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97-final:*:*:*:*:*:*:* Versions 0.97-final Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.1:*:*:*:*:*:*:* Versions 0.97.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.2:*:*:*:*:*:*:* Versions 0.97.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.3:*:*:*:*:*:*:* Versions 0.97.3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.4:*:*:*:*:*:*:* Versions 0.97.4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.5:*:*:*:*:*:*:* Versions 0.97.5 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.6:*:*:*:*:*:*:* Versions 0.97.6 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.7:*:*:*:*:*:*:* Versions 0.97.7 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre1:*:*:*:*:*:*:* Versions 0.97.7pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre2:*:*:*:*:*:*:* Versions 0.97.7pre2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre3:*:*:*:*:*:*:* Versions 0.97.7pre3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97pre1:*:*:*:*:*:*:* Versions 0.97pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97pre2:*:*:*:*:*:*:* Versions 0.97pre2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97pre3:*:*:*:*:*:*:* Versions 0.97pre3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97pre4:*:*:*:*:*:*:* Versions 0.97pre4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.97pre5:*:*:*:*:*:*:* Versions 0.97pre5 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98-final:*:*:*:*:*:*:* Versions 0.98-final Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.1:*:*:*:*:*:*:* Versions 0.98.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.2:*:*:*:*:*:*:* Versions 0.98.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.2a:*:*:*:*:*:*:* Versions 0.98.2a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.3:*:*:*:*:*:*:* Versions 0.98.3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.4:*:*:*:*:*:*:* Versions 0.98.4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.5:*:*:*:*:*:*:* Versions 0.98.5 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.6:*:*:*:*:*:*:* Versions 0.98.6 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98.7:*:*:*:*:*:*:* Versions 0.98.7 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98pre1:*:*:*:*:*:*:* Versions 0.98pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.98pre2:*:*:*:*:*:*:* Versions 0.98pre2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.1:*:*:*:*:*:*:* Versions 0.99.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.1a:*:*:*:*:*:*:* Versions 0.99.1a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.1b:*:*:*:*:*:*:* Versions 0.99.1b Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.2:*:*:*:*:*:*:* Versions 0.99.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.2a:*:*:*:*:*:*:* Versions 0.99.2a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.3:*:*:*:*:*:*:* Versions 0.99.3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.4:*:*:*:*:*:*:* Versions 0.99.4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99.9:*:*:*:*:*:*:* Versions 0.99.9 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99a:*:*:*:*:*:*:* Versions 0.99a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99b:*:*:*:*:*:*:* Versions 0.99b Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99pre1:*:*:*:*:*:*:* Versions 0.99pre1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:0.99pre2:*:*:*:*:*:*:* Versions 0.99pre2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.13a:*:*:*:*:*:*:* Versions 1.0.13a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.16a:*:*:*:*:*:*:* Versions 1.0.16a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.16b:*:*:*:*:*:*:* Versions 1.0.16b Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.16c:*:*:*:*:*:*:* Versions 1.0.16c Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.17a:*:*:*:*:*:*:* Versions 1.0.17a Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·Pureftpd
  • cpe:2.3:a:pureftpd:pure-ftpd:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·Pureftpd

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-1575
  2. 2026-10-03 Alias added: GHSA-mqpg-5c3p-cx82

References

Patch 3

Advisory 1

Other 8

  • TI-2024-32304 pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. CVSS 3.1HIGH 8.6
  • TI-2017-08960 Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging… CVSS 3.0CRITICAL 9.8
  • TI-2020-07487 An issue was discovered in Pure-FTPd 1.0.49. CVSS 3.1HIGH 7.5
  • TI-2020-07415 An issue was discovered in Pure-FTPd 1.0.49. CVSS 3.1HIGH 7.5
  • TI-2021-17564 In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server… CVSS 3.1HIGH 7.5
  • TI-2020-17954 Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making… CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences