pureftpd -- multiple vulnerabilities

Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled -- Cf. CVE-2011-0418. Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. If you're using TLS, upgrading is recommended...

Unfixed XSS vulnerability at www.bracesbakery.co.uk

Security researcher Ragamuffin, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.bracesbakery.co.uk, which at the time of submission ranked 4917445 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It...