Lucene search

K
ubuntuUbuntuUSN-1098-1
HistoryMar 29, 2011 - 12:00 a.m.

vsftpd vulnerability

2011-03-2900:00:00
ubuntu.com
59

7.5 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.29 Low

EPSS

Percentile

96.8%

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • vsftpd - lightweight, efficient FTP server written for security

Details

It was discovered that vsftpd incorrectly handled certain glob expressions.
A remote authenticated user could use a crafted glob expression to cause
vftpd to consume all resources, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchvsftpd<Β 2.2.0-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchvsftpd<Β 2.0.6-1ubuntu1.2UNKNOWN
Ubuntu6.06noarchvsftpd<Β 2.0.4-0ubuntu4.1UNKNOWN
Ubuntu10.10noarchvsftpd<Β 2.3.0~pre2-4ubuntu2.2UNKNOWN
Ubuntu10.04noarchvsftpd<Β 2.2.2-3ubuntu6.1UNKNOWN

7.5 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.29 Low

EPSS

Percentile

96.8%