Vulnerabilities

TI-2021-10636 CVE-2021-30047 · GHSA-p8mp-mm84-7pqr

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.

HIGH 72

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03213 Published 2023-08-22 Will not fix

TI-2021-02564 CVE-2021-3618 · GHSA-r9r5-jxp7-whr4

Improper certificate validation in ALPACA

LOW 36

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02027 Published 2022-03-23 No fix listed CWE-295

TI-2011-02215 CVE-2011-2523 · GHSA-qf3g-hgw2-8r8h

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

CRITICAL 86

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96184 Published 2019-11-27 No fix listed CWE-78

TI-2015-01287 CVE-2015-1419 · GHSA-2r24-78wj-92qx

Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass…

LOW 33

Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06787 Published 2015-01-28 No fix listed

TI-2011-00665 CVE-2011-0762 · GHSA-jh3r-4mfv-pjv8

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote…

MEDIUM 57

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT com…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.73946 Published 2011-03-02 Fixed CWE-400

Vulnerabilities

Filters

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.

Improper certificate validation in ALPACA

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass…

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote…