Unscored severity · published Nov 4, 2011
CVE-2011-3171
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Pure-ftpd · Pureftpd
through 1.0.22; 0.90; 0.91; 0.92; 0.93; 0.94; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3171
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3171
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html
www.securityfocus.com
http://www.securityfocus.com/bid/49541
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69686
More from Pure-ftpd
9.8
CVE-2017-12170
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service…
8.6
CVE-2024-48208
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow
7.5
CVE-2021-40524
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a…
7.5
CVE-2020-35359
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit
7.5
CVE-2020-9274
An issue was discovered in Pure-FTPd 1.0.49