pureftpd records
12 published records for vendor pureftpd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read2
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-399 Resource Management Errors1
- CWE-400 Uncontrolled Resource Consumption1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2017-12170No exploit | Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was pureftpd · pure-ftpd | Critical9.8 | — | 1.5% | Sep 21, 2017 |
34Monitor | CVE-2024-48208Proof of concept | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.pureftpd · pure-ftpd · CWE-125 | High8.6 | — | 1.5% | Oct 24, 2024 |
33Monitor | CVE-2011-1575Proof of concept | The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-midpureftpd · pure-ftpd · CWE-399 | Medium5.8 | — | 33.3% | May 23, 2011 |
32Monitor | CVE-2020-9365Proof of concept | An issue was discovered in Pure-FTPd 1.0.49.pureftpd · pure-ftpd · CWE-125 | High7.5 | — | 7.1% | Feb 24, 2020 |
32Monitor | CVE-2020-9274Proof of concept | An issue was discovered in Pure-FTPd 1.0.49.pureftpd · pure-ftpd · CWE-824 | High7.5 | — | 6.0% | Feb 26, 2020 |
31Monitor | CVE-2020-35359Proof of concept | Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.pureftpd · pure-ftpd · CWE-770 | High7.5 | — | 4.4% | Dec 26, 2020 |
31Monitor | CVE-2019-20176Proof of concept | In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.pureftpd · pure-ftpd · CWE-400 | High7.5 | — | 4.3% | Dec 31, 2019 |
31Monitor | CVE-2021-40524Proof of concept | In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, whicpureftpd · pure-ftpd · CWE-434 | High7.5 | — | 4.2% | Sep 5, 2021 |
21Monitor | CVE-2004-0656Proof of concept | The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum numbpureftpd · pureftpd | Medium5.0 | — | 2.3% | Aug 6, 2004 |
18Monitor | CVE-2011-0418Proof of concept | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly bracketnetbsd · netbsd · CWE-20 | Medium4.0 | — | 7.2% | May 24, 2011 |
17Monitor | CVE-2011-0988No exploit | pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware expureftpd · pure-ftpd · CWE-264 | Medium4.4 | — | 0.3% | Apr 18, 2011 |
14Monitor | CVE-2011-3171Proof of concept | Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possiblysuse · linux enterprise desktop · CWE-22 | Low3.6 | — | 0.5% | Nov 4, 2011 |
- CVE-2017-1217039Monitor
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was
CriticalCVSS 9.8No exploitEPSS 1%pureftpd · pure-ftpdSep 21, 2017
- CVE-2024-4820834Monitor
pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow.
HighCVSS 8.6Proof of conceptEPSS 1%pureftpd · pure-ftpdOct 24, 2024
- CVE-2011-157533Monitor
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-mid
MediumCVSS 5.8Proof of conceptEPSS 33%pureftpd · pure-ftpdMay 23, 2011
- CVE-2020-936532Monitor
An issue was discovered in Pure-FTPd 1.0.49.
HighCVSS 7.5Proof of conceptEPSS 7%pureftpd · pure-ftpdFeb 24, 2020
- CVE-2020-927432Monitor
An issue was discovered in Pure-FTPd 1.0.49.
HighCVSS 7.5Proof of conceptEPSS 6%pureftpd · pure-ftpdFeb 26, 2020
- CVE-2020-3535931Monitor
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.
HighCVSS 7.5Proof of conceptEPSS 4%pureftpd · pure-ftpdDec 26, 2020
- CVE-2019-2017631Monitor
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
HighCVSS 7.5Proof of conceptEPSS 4%pureftpd · pure-ftpdDec 31, 2019
- CVE-2021-4052431Monitor
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, whic
HighCVSS 7.5Proof of conceptEPSS 4%pureftpd · pure-ftpdSep 5, 2021
- CVE-2004-065621Monitor
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum numb
MediumCVSS 5.0Proof of conceptEPSS 2%pureftpd · pureftpdAug 6, 2004
- CVE-2011-041818Monitor
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly bracket
MediumCVSS 4.0Proof of conceptEPSS 7%netbsd · netbsdMay 24, 2011
- CVE-2011-098817Monitor
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware ex
MediumCVSS 4.4No exploitEPSS 0%pureftpd · pure-ftpdApr 18, 2011
- CVE-2011-317114Monitor
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly
LowCVSS 3.6Proof of conceptEPSS 0%suse · linux enterprise desktopNov 4, 2011