CVE-2024-48208

CVE-2024-48208 이 저장소에는 단순한 OOBOut-of-bound 읽기가 어떻게 jail 탈출과 손상된 접근 제어로 이어질 수 있는지에 대한 PoC 개발과 관련된 모든 작업이 포함되어 있습니다. 취약점 정보 원래 CVE 설명은 다음과 같습니다: 공식 저장소의 Github PR은 ls.c 파일의 domlsd 함수가 OOB 읽기 취약점에 노출되는 방식을 자세히 설명합니다. base 포인터의 검증되지 않은 증가로 인해 포인터가 cmd 버퍼 외부의 버퍼를 가리킬 수 있으며, 이는 1053 및 1054 라인에서 확인할 수...

CVE-2024-58383

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383

Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...

EUVD-2024-55764

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

Debian: Security Advisory (DLA-4360-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4360-1 pure-ftpd - security update

Bulletin has no description...

EUVD-2019-10730

Malware in sbrugna...

EUVD-2017-3746

Malware in sbrugna...

EUVD-2020-30186

Malware in sbrugna...

EUVD-2011-3138

Malware in sbrugna...

EUVD-2020-23035

Malware in sbrugna...

EUVD-2020-30103

Malware in sbrugna...

EUVD-2011-1000

Malware in sbrugna...

EUVD-2021-27700

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-35359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. CVE-2020-35359 Note that...

Linux Distros Unpatched Vulnerability : CVE-2024-48208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd function of the ls.c file. CVE-2024-48208 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2020-9365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds OOB read has been detected in the purestrcmp function in utils.c. CVE-2020-9365 Note that Nessus...

Pure-FTPd < 1.0.52 DoS Vulnerability

Pure-FTPd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pureftpd:pure-ftpd";...