Code injection

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

CVE-2011-0988: Undefined Security Weakness

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

PT-2011-2796

Name of the Vulnerable Software and Affected Versions pure-ftpd version 1.0.22 Description The issue allows local users to gain privileges by overwriting arbitrary files due to the creation of a world-writeable directory when running OES Netware extensions. Recommendations For pure-ftpd version...