230 matches found
EUVD-2024-55764
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
CVE-2024-58383
Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...
PT-2026-91184
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
CVE-2024-48208
CVE-2024-48208 该仓库包含围绕 PoC 开发的所有工作，内容涉及一个简单的 OOB（越界）读取如何导致 jail 逃逸以及访问控制失效。 关于该漏洞 原始的 CVE 描述如下： 官方仓库中的 Github PR 详细说明了 ls.c 文件中的 domlsd 函数如何存在越界读取漏洞，原因是对基础指针的递增没有进行检查，这可能导致指针指向 cmd 缓冲区之外的地址，正如第 1053 和 1054 行所示。 利用 OOB 实现 Jail 逃逸/访问控制失效： 在 GDB 中调试缓冲区时，我们注意到越界读取会让程序进入一个名为 replybuf 的区域。 经过进一步分析，我们发现...
Debian: Security Advisory (DLA-4360-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4360-1 pure-ftpd - security update
Bulletin has no description...
EUVD-2011-3138
Malware in sbrugna...
EUVD-2020-30186
Malware in sbrugna...
EUVD-2020-23035
Malware in sbrugna...
EUVD-2019-10730
Malware in sbrugna...
EUVD-2017-3746
Malware in sbrugna...
EUVD-2011-1000
Malware in sbrugna...
EUVD-2020-30103
Malware in sbrugna...
EUVD-2021-27700
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-35359
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. CVE-2020-35359 Note that...
Linux Distros Unpatched Vulnerability : CVE-2024-48208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd function of the ls.c file. CVE-2024-48208 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2020-9365
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds OOB read has been detected in the purestrcmp function in utils.c. CVE-2020-9365 Note that Nessus...
Pure-FTPd < 1.0.52 DoS Vulnerability
Pure-FTPd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pureftpd:pure-ftpd";...
pure-ftpd-1.0.51-5.1 on GA media (moderate)
pure-ftpd-1.0.51-5.1 on GA media Announcement ID: openSUSE-SU-2025:15266-1 Rating: moderate Cross-References: CVE-2024-48208 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...