TI-2024-32304 CVE-2024-48208 · GHSA-rrmj-qxgv-v296
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.
Priority HIGH 76
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.
Vulnerabilities
12 records
TI-2021-17564 CVE-2021-40524 · GHSA-p53v-96v3-p5jg
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server…
Priority MEDIUM 40
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang.
TI-2020-17954 CVE-2020-35359 · GHSA-w7rv-vxq3-894m
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making…
Priority MEDIUM 40
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.
TI-2020-07415 CVE-2020-9274 · GHSA-26hm-gghq-x5rr
An issue was discovered in Pure-FTPd 1.0.49.
Priority MEDIUM 42
An issue was discovered in Pure-FTPd 1.0.49.
TI-2020-07487 CVE-2020-9365 · GHSA-3863-h4xw-2xv3
An issue was discovered in Pure-FTPd 1.0.49.
Priority MEDIUM 43
An issue was discovered in Pure-FTPd 1.0.49.
TI-2019-14551 CVE-2019-20176 · GHSA-fgwh-frh9-vm43
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
Priority MEDIUM 40
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
TI-2017-08960 CVE-2017-12170 · GHSA-fmmm-v7h7-fpx9
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging…
Priority MEDIUM 45
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration.
TI-2011-02801 CVE-2011-3171 · GHSA-r9x3-69v2-2pq2
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when…
Priority LOW 18
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled,…
TI-2011-00349 CVE-2011-0418 · GHSA-g8vx-5jmv-rgqx
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not…
Priority LOW 29
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory…
TI-2011-01394 CVE-2011-1575 · GHSA-mqpg-5c3p-cx82
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly…
Priority MEDIUM 51
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleart…
TI-2011-00849 CVE-2011-0988 · GHSA-fcmr-8hmm-9f43
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise…
Priority LOW 20
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overw…
TI-2004-00597 CVE-2004-0656 · GHSA-g7m6-w6x3-gg99
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to…
Priority LOW 27
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.