Lucene search
+L

1047 matches found

NVD
NVD
added 2021/01/26 11:15 p.m.9 views

CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

10CVSS9.9AI score0.03544EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/26 11:15 p.m.17 views

Command injection

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

10CVSS8.3AI score0.03544EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/01/26 10:56 p.m.125 views

CVE-2013-2512

The CVE-2013-2512 entry concerns the ftpd gem for Ruby (version 0.2.1). Affected component: the FTP command handling (LIST/NLST) that accepts arguments containing shell metacharacters. Root cause: improper sanitization allows remote attackers to execute arbitrary OS commands through crafted FTP t...

10CVSS9.9AI score0.03544EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.12 views

Ruby OS Command Injection Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. A security vulnerability in Ruby ftpd gem 0.2.1 allows remote attackers to execute arbitrary operating system commands...

10CVSS7.6AI score0.03544EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/12/28 12:00 a.m.10 views

Pure-FTPd Denial of Service Vulnerability (CNVD-2020-75153)

Pure-FTPd is an FTP File Transfer Protocol server. A denial-of-service vulnerability exists in Pure-FTPd version 1.0.48, which allows remote attackers to exploit the vulnerability to prevent legitimate server usage by establishing enough connections to exceed the connection limit...

7.5CVSS7AI score0.04744EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/26 5:15 a.m.30 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7.5AI score0.04744EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/26 5:15 a.m.14 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7AI score
SaveExploits0References1
Prion
Prion
added 2020/12/26 5:15 a.m.20 views

Code injection

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

5CVSS7.5AI score0.04744EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/12/26 5:15 a.m.8 views

UBUNTU-CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS5.8AI score0.04744EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2020/12/26 5:15 a.m.34 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7.1AI score0.04744EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/12/26 4:30 a.m.45 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5AI score0.04744EPSS
SaveExploits1References1
CVE
CVE
added 2020/12/26 4:30 a.m.116 views

CVE-2020-35359

Affected software: Pure-FTPd 1.0.48. Issue: Remote attackers can trigger a denial-of-service by opening enough concurrent connections to exceed the server’s connection limit, preventing legitimate clients from connecting. Root cause: Depletion of available connections due to excessive parallel co...

7.5CVSS7.5AI score0.04744EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/12/26 12:00 a.m.20 views

PT-2020-17314

Name of the Vulnerable Software and Affected Versions Pure-FTPd version 1.0.48 Description The issue allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. Recommendations For Pure-FTPd version 1.0.48, consider increasing the connecti...

7.5CVSS6.5AI score0.04744EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2020/12/26 12:00 a.m.12 views

Pure-FTPd 安全漏洞

Pure-FTPd is an FTP File Transfer Protocol server. A denial-of-service vulnerability exists in Pure-FTPd version 1.0.48, which allows remote attackers to exploit the vulnerability to prevent legitimate server usage by establishing enough connections to exceed the connection limit...

7.5CVSS7.2AI score0.04744EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2020/12/15 12:00 a.m.48 views

FreeBSD FTPD Improper Handling of Exceptional Conditions Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of FreeBSD FTPD. Authentication is required to exploit this vulnerability. The specific flaw exists within the enforcement of permissions. The process does not properly handle exceptional conditions. An...

8.8CVSS1.7AI score0.0135EPSS
SaveExploits0References1
zdt
zdt
added 2020/11/26 12:00 a.m.31 views

Pure-FTPd 1.0.48 - Remote Denial of Service Exploit

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/11/26 12:00 a.m.418 views

Pure-FTPd 1.0.48 Remote Denial Of Service

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/11/26 12:00 a.m.839 views

Pure-FTPd 1.0.48 - Remote Denial of Service

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

5.3AI score
SaveExploits0
Veracode
Veracode
added 2020/09/21 6:27 a.m.28 views

Denial Of Service (DoS)

pure-ftpd is vulnerable to denial of service DoS. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the lookupaliasconst char alias or printaliasesvoid function is called, they fail to correctly detect the end of the linked list and try to access a...

7.5CVSS2.8AI score0.05957EPSS
SaveExploits0References11Affected Software2
OpenVAS
OpenVAS
added 2020/09/18 12:00 a.m.22 views

Ubuntu: Security Advisory (USN-4515-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.05957EPSS
SaveExploits0References2
Rows per page
Query Builder