Lucene search
+L

CVE-2011-0418

🗓️ 24 May 2011 23:00:00Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov👁 103 Views🌐 WEB

The glob implementation in Pure-FTPd before 1.0.32 allows remote authenticated users to cause a denial of service

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
FreeBSD 9.1 ftpd Remote Denial of Service
5 Feb 201300:00
zdt
freebsd
FreeBSD
pureftpd -- multiple vulnerabilities
1 Apr 201100:00
freebsd
cvelist
Cvelist
CVE-2011-0418
24 May 201123:00
cvelist
debiancve
Debian CVE
CVE-2011-0418
24 May 201123:00
debiancve
exploitdb
Exploit DB
FreeBSD 9.1 - 'ftpd' Remote Denial of Service
5 Feb 201300:00
exploitdb
exploitpack
exploitpack
FreeBSD 9.1 - ftpd Remote Denial of Service
5 Feb 201300:00
exploitpack
fedora
Fedora
[SECURITY] Fedora 15 Update: pure-ftpd-1.0.32-1.fc15
30 May 201122:34
fedora
fedora
Fedora
[SECURITY] Fedora 14 Update: pure-ftpd-1.0.32-1.fc14
21 Jun 201117:38
fedora
nessus
Tenable Nessus
Fedora 14 : pure-ftpd-1.0.32-1.fc14 (2011-7374)
22 Jun 201100:00
nessus
nessus
Tenable Nessus
Fedora 15 : pure-ftpd-1.0.32-1.fc15 (2011-7434)
31 May 201100:00
nessus
Rows per page
NVD
Node
OR
pureftpdpure-ftpdRange1.0.31
pureftpdpure-ftpdMatch0.95-pre1
pureftpdpure-ftpdMatch0.95-pre2
pureftpdpure-ftpdMatch0.95-pre3
pureftpdpure-ftpdMatch0.95-pre4
pureftpdpure-ftpdMatch0.96pre1
pureftpdpure-ftpdMatch0.97-final
pureftpdpure-ftpdMatch0.97.7pre1
pureftpdpure-ftpdMatch0.97.7pre2
pureftpdpure-ftpdMatch0.97.7pre3
pureftpdpure-ftpdMatch0.97pre1
pureftpdpure-ftpdMatch0.97pre2
pureftpdpure-ftpdMatch0.97pre3
pureftpdpure-ftpdMatch0.97pre4
pureftpdpure-ftpdMatch0.97pre5
pureftpdpure-ftpdMatch0.98-final
pureftpdpure-ftpdMatch0.98.2a
pureftpdpure-ftpdMatch0.98pre1
pureftpdpure-ftpdMatch0.98pre2
pureftpdpure-ftpdMatch0.99.1a
pureftpdpure-ftpdMatch0.99.1b
pureftpdpure-ftpdMatch0.99.2a
pureftpdpure-ftpdMatch0.99pre1
pureftpdpure-ftpdMatch0.99pre2
pureftpdpure-ftpdMatch1.0.13a
pureftpdpure-ftpdMatch1.0.16a
pureftpdpure-ftpdMatch1.0.16b
pureftpdpure-ftpdMatch1.0.16c
pureftpdpure-ftpdMatch1.0.17a
Node
netbsdnetbsdMatch5.1
ParameterPositionPathDescriptionCWE
STAT command argument containing glob patternnested/issue/WLB-2013020003Remote authenticated FTP users can cause memory exhaustion/DoS by sending crafted STAT commands with curly-brace expressions (GLOB_BRACE).CWE-20
STAT command argument containing glob patternnested/issue/WLB-2013010233Exposes the same DoS via crafted STAT commands exploiting glob for memory/resource exhaustion.CWE-20
GLOB_LIMIT check and GLOB_BRACE usage in ftpdpath/cgi/cvsweb.cgi/src/libexec/ftpd/ftpd.cReferences to ftpd implementation and potential fixes related to glob/brace expansion affecting DoS via inventory of resources.CWE-20
glob.c diff showing brace expansion handlingpath/bsdweb.cgi/src/lib/libc/gen/glob.c.diff?r1=1.24&r2=1.23.10.2Patch/diff related to glob(3) brace expansion vulnerability impacting DoS potentialCWE-20

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:27Current
5.9Medium risk
Vulners AI Score5.9
CVSS 24
EPSS0.07255
103