CVE-2024-48208

CVE-2024-48208 El repositorio contiene todo el trabajo relacionado con el desarrollo del PoC sobre cómo una simple lectura OOB fuera de límites puede resultar en escapadas de la cárcel y en control de acceso roto. Acerca de la Vulnerabilidad La descripción original del CVE es la siguiente: La PR ...

CVE-2024-58383

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

EUVD-2024-55764

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383

Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

PT-2026-91184

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

Debian: Security Advisory (DLA-4360-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4360-1 pure-ftpd - security update

Bulletin has no description...

EUVD-2017-3746

Malware in sbrugna...

EUVD-2011-3138

Malware in sbrugna...

EUVD-2020-30186

Malware in sbrugna...

EUVD-2020-23035

Malware in sbrugna...

EUVD-2019-10730

Malware in sbrugna...

EUVD-2020-30103

Malware in sbrugna...

EUVD-2011-1000

Malware in sbrugna...

EUVD-2021-27700

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-35359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. CVE-2020-35359 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-9365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds OOB read has been detected in the purestrcmp function in utils.c. CVE-2020-9365 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-48208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd function of the ls.c file. CVE-2024-48208 Note that Nessu...