Lucene search
+L

1176 matches found

Github Security Blog
Github Security Blog
•added 2021/10/12 10:33 p.m.•40 views

OS Command Injection in ftpd

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

10CVSS8.1AI score0.03544EPSS
SaveExploits1References5Affected Software1
osv-debian
osv-debian
•added 2021/09/05 7:15 p.m.•13 views

DEBIAN-CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS7.4AI score0.04285EPSS
SaveExploits1References1
OSV
OSV
•added 2021/09/05 7:15 p.m.•30 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS6.8AI score
SaveExploits0References4
NVD
NVD
•added 2021/09/05 7:15 p.m.•30 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS0.04285EPSS
SaveExploits1References4
Prion
Prion
•added 2021/09/05 7:15 p.m.•29 views

Code injection

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

5CVSS7.4AI score0.04285EPSS
SaveExploits1References3Affected Software1
osv-ubuntu
osv-ubuntu
•added 2021/09/05 7:15 p.m.•18 views

UBUNTU-CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS5.8AI score0.04285EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/09/05 7:15 p.m.•54 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS7.1AI score0.04285EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/09/05 6:26 p.m.•39 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.6AI score0.04285EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2021/09/05 6:26 p.m.•68 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS7.4AI score0.04285EPSS
SaveExploits1
Mend
Mend
•added 2021/09/05 6:26 p.m.•5 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

8.7CVSS0.04285EPSS
SaveExploits1References6
CVE
CVE
•added 2021/09/05 6:26 p.m.•109 views

CVE-2021-40524

Pure-FTPd (before 1.0.50) is affected by an incorrect max_filesize quota check that allows uploading files of unbounded size, potentially causing denial of service or a server hang. The root cause is a greater-than-zero test not accounting for an initial -1 value. Affected versions include 1.0.23...

7.5CVSS7.3AI score0.04285EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/05 12:00 a.m.•6 views

PT-2021-22920

Name of the Vulnerable Software and Affected Versions Pure-FTPd versions 1.0.23 through 1.0.49 Description The issue arises from an incorrect max filesize quota mechanism in the server, allowing attackers to upload files of unbounded size. This can lead to denial of service or a server hang due t...

7.5CVSS0.04285EPSS
SaveExploits1References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/05 12:00 a.m.•6 views

CVE-2021-40524: Unrestricted Upload of File with Dangerous Type

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS5.8AI score0.04285EPSS
SaveExploits1References2
NVD
NVD
•added 2021/06/22 2:15 p.m.•43 views

CVE-2010-4816

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

7.5CVSS0.02418EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/06/22 2:15 p.m.•96 views

CVE-2010-4816

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

7.5CVSS7.1AI score0.02418EPSS
SaveExploits1References2
Prion
Prion
•added 2021/06/22 2:15 p.m.•209 views

Null pointer dereference

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

5CVSS7.1AI score0.02418EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2021/06/22 1:44 p.m.•930 views

CVE-2010-4816

CVE-2010-4816 affects FreeBSD 8.0, 6.3, 4.9 and OpenBSD 4.6. The issue is a null pointer dereference in ftpd/popen.c that may enable remote denial of service of the ftpd service. The sources indicate a network-accessible trigger with availability impact, but do not provide exploitation details or...

7.5CVSS7.4AI score0.02418EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/06/22 1:44 p.m.•49 views

CVE-2010-4816

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

7.4AI score0.02418EPSS
SaveExploits1References3
Mend
Mend
•added 2021/06/22 1:44 p.m.•7 views

CVE-2010-4816

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

8.7CVSS0.02418EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/06/22 12:00 a.m.•7 views

PT-2021-3439

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.9 through 8.0 OpenBSD version 4.6 Description A null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service. The issue is related to an uncontrolled resource consumption in the ftpd...

7.8CVSS0.02418EPSS
SaveExploits1References6
Rows per page
Query Builder