Lucene search
+L

245 matches found

CVE
CVE
•added 2021/09/05 6:26 p.m.•104 views

CVE-2021-40524

Pure-FTPd (before 1.0.50) is affected by an incorrect max_filesize quota check that allows uploading files of unbounded size, potentially causing denial of service or a server hang. The root cause is a greater-than-zero test not accounting for an initial -1 value. Affected versions include 1.0.23...

7.5CVSS7.3AI score0.04285EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2021/09/05 6:26 p.m.•67 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS7.4AI score0.04285EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/09/05 6:26 p.m.•34 views

CVE-2021-40524

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.6AI score0.04285EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/05 12:00 a.m.•3 views

CVE-2021-40524: Unrestricted Upload of File with Dangerous Type

In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. Versions 1.0.2...

7.5CVSS5.8AI score0.04285EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2014:1558-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.7AI score0.99999EPSS
SaveExploits7References2
CNVD
CNVD
•added 2020/12/28 12:00 a.m.•15 views

Pure-FTPd Denial of Service Vulnerability (CNVD-2020-75153)

Pure-FTPd is an FTP File Transfer Protocol server. A denial-of-service vulnerability exists in Pure-FTPd version 1.0.48, which allows remote attackers to exploit the vulnerability to prevent legitimate server usage by establishing enough connections to exceed the connection limit...

7.5CVSS7AI score0.04465EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/26 5:15 a.m.•36 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7.5AI score0.04465EPSS
SaveExploits1References1
OSV
OSV
•added 2020/12/26 5:15 a.m.•16 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7AI score
SaveExploits0References1
Prion
Prion
•added 2020/12/26 5:15 a.m.•26 views

Code injection

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

5CVSS7.5AI score0.04465EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2020/12/26 5:15 a.m.•12 views

UBUNTU-CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS5.8AI score0.04465EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/12/26 5:15 a.m.•37 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS7.1AI score0.04465EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/12/26 4:30 a.m.•52 views

CVE-2020-35359

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5AI score0.04465EPSS
SaveExploits1References1
CVE
CVE
•added 2020/12/26 4:30 a.m.•127 views

CVE-2020-35359

Affected software: Pure-FTPd 1.0.48. Issue: Remote attackers can trigger a denial-of-service by opening enough concurrent connections to exceed the server’s connection limit, preventing legitimate clients from connecting. Root cause: Depletion of available connections due to excessive parallel co...

7.5CVSS7.5AI score0.04465EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/26 12:00 a.m.•6 views

CVE-2020-35359: Allocation of Resources Without Limits or Throttling

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...

7.5CVSS5.9AI score0.04465EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/26 12:00 a.m.•27 views

PT-2020-17314

Name of the Vulnerable Software and Affected Versions Pure-FTPd version 1.0.48 Description The issue allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. Recommendations For Pure-FTPd version 1.0.48, consider increasing the connecti...

7.5CVSS6.5AI score0.04465EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2020/12/26 12:00 a.m.•21 views

Pure-FTPd 安全漏洞

Pure-FTPd is an FTP File Transfer Protocol server. A denial-of-service vulnerability exists in Pure-FTPd version 1.0.48, which allows remote attackers to exploit the vulnerability to prevent legitimate server usage by establishing enough connections to exceed the connection limit...

7.5CVSS7.2AI score0.04465EPSS
SaveExploits1References2
zdt
zdt
•added 2020/11/26 12:00 a.m.•37 views

Pure-FTPd 1.0.48 - Remote Denial of Service Exploit

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/11/26 12:00 a.m.•423 views

Pure-FTPd 1.0.48 Remote Denial Of Service

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/11/26 12:00 a.m.•845 views

Pure-FTPd 1.0.48 - Remote Denial of Service

Exploit Title: Pure-FTPd 1.0.48 - Remote Denial of Service Date: 2020. nov. 26., 09:32:17 CET Exploit Author: xynmaps Vendor Homepage: https://www.pureftpd.org/project/pure-ftpd/ Software Link: https://github.com/jedisct1/pure-ftpd/ Version: 1.0.48 Tested on: Parrot Security OS 5.9.0 encoding=utf...

5.3AI score
SaveExploits0
Veracode
Veracode
•added 2020/09/21 6:27 a.m.•30 views

Denial Of Service (DoS)

pure-ftpd is vulnerable to denial of service DoS. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the lookupaliasconst char alias or printaliasesvoid function is called, they fail to correctly detect the end of the linked list and try to access a...

7.5CVSS2.8AI score0.06006EPSS
SaveExploits0References11Affected Software2
Rows per page
Query Builder