CVE-2024-48208

CVE-2024-48208 Репозиторий содержит всю работу, связанную с разработкой PoC, демонстрирующего, как простое чтение за пределами буфера OOB может привести к побегу из изолированной среды jail escape и нарушению контроля доступа. Об уязвимости Оригинальное описание CVE следующее: В PR на GitHub в...

CVE-2024-58383

Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...

EUVD-2024-55764

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

PT-2026-91184

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

Debian: Security Advisory (DLA-4360-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4360-1 pure-ftpd - security update

Bulletin has no description...

EUVD-2017-3746

Malware in sbrugna...

EUVD-2020-30186

Malware in sbrugna...

EUVD-2019-10730

Malware in sbrugna...

EUVD-2020-23035

Malware in sbrugna...

EUVD-2011-3138

Malware in sbrugna...

EUVD-2011-1000

Malware in sbrugna...

EUVD-2020-30103

Malware in sbrugna...

EUVD-2021-27700

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-35359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. CVE-2020-35359 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-9365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds OOB read has been detected in the purestrcmp function in utils.c. CVE-2020-9365 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-48208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd function of the ls.c file. CVE-2024-48208 Note that Nessu...

Pure-FTPd < 1.0.52 DoS Vulnerability

Pure-FTPd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pureftpd:pure-ftpd";...

pure-ftpd-1.0.51-5.1 on GA media (moderate)

pure-ftpd-1.0.51-5.1 on GA media Announcement ID: openSUSE-SU-2025:15266-1 Rating: moderate Cross-References: CVE-2024-48208 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...