Pureftpd Pure-ftpd
11 CVEs affecting Pureftpd Pure-ftpd. Latest disclosed: 2024-10-24. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12170 | Critical | 9.8 | 2017-09-21 | Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after updat… |
CVE-2024-48208 | High | 8.6 | 2024-10-24 | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file. |
CVE-2021-40524 | High | 7.5 | 2021-09-05 | In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denia… |
CVE-2020-35359 | High | 7.5 | 2020-12-26 | Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. |
CVE-2020-9274 | High | 7.5 | 2020-02-26 | An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(con… |
CVE-2020-9365 | High | 7.5 | 2020-02-24 | An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c. |
CVE-2019-20176 | High | 7.5 | 2019-12-31 | In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. |
CVE-2011-3171 | | 2011-11-04 | Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating sy… | |
CVE-2011-0418 | | 2011-05-24 | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows rem… | |
CVE-2011-1575 | | 2011-05-23 | The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to in… | |
CVE-2011-0988 | | 2011-04-18 | pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a… |