CVE-2025-44657

This CVE affects Linksys EA6350 V2.1.2 where chroot_local_user is enabled in the dynamically generated vsftpd config, enabling potential unauthorized access to system files and privilege escalation, with the device acting as a pivot point on the affected LAN. The vulnerability is driven by the ch...

PT-2025-30293 · Totolink · Totolink A950Rg +2

Name of the Vulnerable Software and Affected Versions: TOTOLink A7100RU versions 7.4 TOTOLink A950RG versions 5.9 TOTOLink T10 versions 5.9 Description: The chroot local user option is enabled in the vsftpd.conf file. This configuration could allow unauthorized access to system files, privilege...

vsftpd bug fix and enhancement update

An update is available for vsftpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

Linux Distros Unpatched Vulnerability : CVE-2021-30047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. CVE-2021-30047 Note that Nessus relies on the presence ...

Elspec G5 Digital Fault Recorder VsFTPd Service Denial of Service (CVE-2021-30047)

Outdated vsftpd service with known DoS issue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502820; scriptversion"1.2";...

PT-2026-2907

Name of the Vulnerable Software and Affected Versions vsftpd affected versions not specified Description A flaw exists in vsftpd that allows for a denial of service DoS. This is due to an integer overflow in the parsing of the ls command parameter, which can be triggered by a remote, authenticate...

RHSA-2011:0337 Red Hat Security Advisory: vsftpd security update

Bulletin has no description...

RHSA-2008:0680 Red Hat Security Advisory: vsftpd security and bug fix update

Bulletin has no description...

RHSA-2008:0579 Red Hat Security Advisory: vsftpd security update

Bulletin has no description...

RHSA-2008:0295 Red Hat Security Advisory: vsftpd security and bug fix update

Bulletin has no description...

VSFTPD 2.3.2 Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VSFTPD 2.3.2 Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the VSFTPD server in versions before...

Photon OS 3.0: Vsftpd PHSA-2022-3.0-0381

An update of the vsftpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Toshiba e-STUDIO2518A vsftpd Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of Toshiba e-STUDIO2518A printers. Authentication is required to exploit this vulnerability. The specific flaw exists within the vsftpd daemon. The issue results from incorrect permissions set on folders...

OPENSUSE-SU-2024:10264-1 vsftpd-3.0.3-7.1 on GA media

These are all security issues fixed in the vsftpd-3.0.3-7.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : vsftpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vsftpd: denial of service due to limited number of connections allowed CVE-2021-30047 Note that Nessus has not test...

RHEL 7 : vsftpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vsftpd: denial of service due to limited number of connections allowed CVE-2021-30047 Note that Nessus has not test...

RHEL 6 : vsftpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vsftpd: denial of service due to limited number of connections allowed CVE-2021-30047 Note that Nessus has not test...

Amazon Linux 2 : vsftpd (ALAS-2024-2431)

The version of vsftpd installed on the remote host is prior to 3.0.2-25. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2431 advisory. ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using...

Medium: vsftpd

Issue Overview: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can...

Medium: vsftpd

Issue Overview: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can...