PU
Product
Pure-ftpd
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 0Low 0
Watch
Add Pure-ftpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12170 | 9.8 | Sep 21 | Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service… Affected: 1.0.46-1 |
| CVE-2024-48208 | 8.6 | Oct 24 | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow Affected: before 1.0.52 |
| CVE-2021-40524 | 7.5 | Sep 5 | In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a… Affected: 1.0.23 before 1.0.50 |
| CVE-2020-35359 | 7.5 | Dec 26 | Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit Affected: 1.0.48 |
| CVE-2020-9274 | 7.5 | Feb 26 | An issue was discovered in Pure-FTPd 1.0.49 Affected: before 1.0.50 |
| CVE-2020-9365 | 7.5 | Feb 24 | An issue was discovered in Pure-FTPd 1.0.49 Affected: 1.0.49 |
| CVE-2019-20176 | 7.5 | Dec 31 | In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c Affected: 1.0.49 |
| CVE-2011-3171 | – | Nov 4 | Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the… Affected: through 1.0.22; 0.90; 0.91; 0.92; 0.93; 0.94; +34 more |
| CVE-2011-0418 | – | May 24 | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated… Affected: through 1.0.31; 0.90; 0.91; 0.92; 0.93; 0.94; +34 more |
| CVE-2011-1575 | – | May 23 | The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into… Affected: through 1.0.29; 0.90; 0.91; 0.92; 0.93; 0.94; +34 more |
| CVE-2011-0988 | – | Apr 18 | pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable… Affected: 1.0.22 |
Showing 11