CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1575

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.222

EPSS Ranking 95.4%

CVSS Severity

CVSS v2 Score 5.8

References

Products affected by CVE-2011-1575

Pureftpd » Pure-Ftpd » Version: 0.90

cpe:2.3:a:pureftpd:pure-ftpd:0.90
Pureftpd » Pure-Ftpd » Version: 0.91

cpe:2.3:a:pureftpd:pure-ftpd:0.91
Pureftpd » Pure-Ftpd » Version: 0.92

cpe:2.3:a:pureftpd:pure-ftpd:0.92
Pureftpd » Pure-Ftpd » Version: 0.93

cpe:2.3:a:pureftpd:pure-ftpd:0.93
Pureftpd » Pure-Ftpd » Version: 0.94

cpe:2.3:a:pureftpd:pure-ftpd:0.94
Pureftpd » Pure-Ftpd » Version: 0.95

cpe:2.3:a:pureftpd:pure-ftpd:0.95
Pureftpd » Pure-Ftpd » Version: 0.95-pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre1
Pureftpd » Pure-Ftpd » Version: 0.95-pre2

cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre2
Pureftpd » Pure-Ftpd » Version: 0.95-pre3

cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre3
Pureftpd » Pure-Ftpd » Version: 0.95-pre4

cpe:2.3:a:pureftpd:pure-ftpd:0.95-pre4
Pureftpd » Pure-Ftpd » Version: 0.95.1

cpe:2.3:a:pureftpd:pure-ftpd:0.95.1
Pureftpd » Pure-Ftpd » Version: 0.95.2

cpe:2.3:a:pureftpd:pure-ftpd:0.95.2
Pureftpd » Pure-Ftpd » Version: 0.96

cpe:2.3:a:pureftpd:pure-ftpd:0.96
Pureftpd » Pure-Ftpd » Version: 0.96.1

cpe:2.3:a:pureftpd:pure-ftpd:0.96.1
Pureftpd » Pure-Ftpd » Version: 0.96pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.96pre1
Pureftpd » Pure-Ftpd » Version: 0.97

cpe:2.3:a:pureftpd:pure-ftpd:0.97
Pureftpd » Pure-Ftpd » Version: 0.97-final

cpe:2.3:a:pureftpd:pure-ftpd:0.97-final
Pureftpd » Pure-Ftpd » Version: 0.97.1

cpe:2.3:a:pureftpd:pure-ftpd:0.97.1
Pureftpd » Pure-Ftpd » Version: 0.97.2

cpe:2.3:a:pureftpd:pure-ftpd:0.97.2
Pureftpd » Pure-Ftpd » Version: 0.97.3

cpe:2.3:a:pureftpd:pure-ftpd:0.97.3
Pureftpd » Pure-Ftpd » Version: 0.97.4

cpe:2.3:a:pureftpd:pure-ftpd:0.97.4
Pureftpd » Pure-Ftpd » Version: 0.97.5

cpe:2.3:a:pureftpd:pure-ftpd:0.97.5
Pureftpd » Pure-Ftpd » Version: 0.97.6

cpe:2.3:a:pureftpd:pure-ftpd:0.97.6
Pureftpd » Pure-Ftpd » Version: 0.97.7

cpe:2.3:a:pureftpd:pure-ftpd:0.97.7
Pureftpd » Pure-Ftpd » Version: 0.97.7pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre1
Pureftpd » Pure-Ftpd » Version: 0.97.7pre2

cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre2
Pureftpd » Pure-Ftpd » Version: 0.97.7pre3

cpe:2.3:a:pureftpd:pure-ftpd:0.97.7pre3
Pureftpd » Pure-Ftpd » Version: 0.97pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.97pre1
Pureftpd » Pure-Ftpd » Version: 0.97pre2

cpe:2.3:a:pureftpd:pure-ftpd:0.97pre2
Pureftpd » Pure-Ftpd » Version: 0.97pre3

cpe:2.3:a:pureftpd:pure-ftpd:0.97pre3
Pureftpd » Pure-Ftpd » Version: 0.97pre4

cpe:2.3:a:pureftpd:pure-ftpd:0.97pre4
Pureftpd » Pure-Ftpd » Version: 0.97pre5

cpe:2.3:a:pureftpd:pure-ftpd:0.97pre5
Pureftpd » Pure-Ftpd » Version: 0.98

cpe:2.3:a:pureftpd:pure-ftpd:0.98
Pureftpd » Pure-Ftpd » Version: 0.98-final

cpe:2.3:a:pureftpd:pure-ftpd:0.98-final
Pureftpd » Pure-Ftpd » Version: 0.98.1

cpe:2.3:a:pureftpd:pure-ftpd:0.98.1
Pureftpd » Pure-Ftpd » Version: 0.98.2

cpe:2.3:a:pureftpd:pure-ftpd:0.98.2
Pureftpd » Pure-Ftpd » Version: 0.98.2a

cpe:2.3:a:pureftpd:pure-ftpd:0.98.2a
Pureftpd » Pure-Ftpd » Version: 0.98.3

cpe:2.3:a:pureftpd:pure-ftpd:0.98.3
Pureftpd » Pure-Ftpd » Version: 0.98.4

cpe:2.3:a:pureftpd:pure-ftpd:0.98.4
Pureftpd » Pure-Ftpd » Version: 0.98.5

cpe:2.3:a:pureftpd:pure-ftpd:0.98.5
Pureftpd » Pure-Ftpd » Version: 0.98.6

cpe:2.3:a:pureftpd:pure-ftpd:0.98.6
Pureftpd » Pure-Ftpd » Version: 0.98.7

cpe:2.3:a:pureftpd:pure-ftpd:0.98.7
Pureftpd » Pure-Ftpd » Version: 0.98pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.98pre1
Pureftpd » Pure-Ftpd » Version: 0.98pre2

cpe:2.3:a:pureftpd:pure-ftpd:0.98pre2
Pureftpd » Pure-Ftpd » Version: 0.99

cpe:2.3:a:pureftpd:pure-ftpd:0.99
Pureftpd » Pure-Ftpd » Version: 0.99.1

cpe:2.3:a:pureftpd:pure-ftpd:0.99.1
Pureftpd » Pure-Ftpd » Version: 0.99.1a

cpe:2.3:a:pureftpd:pure-ftpd:0.99.1a
Pureftpd » Pure-Ftpd » Version: 0.99.1b

cpe:2.3:a:pureftpd:pure-ftpd:0.99.1b
Pureftpd » Pure-Ftpd » Version: 0.99.2

cpe:2.3:a:pureftpd:pure-ftpd:0.99.2
Pureftpd » Pure-Ftpd » Version: 0.99.2a

cpe:2.3:a:pureftpd:pure-ftpd:0.99.2a
Pureftpd » Pure-Ftpd » Version: 0.99.3

cpe:2.3:a:pureftpd:pure-ftpd:0.99.3
Pureftpd » Pure-Ftpd » Version: 0.99.4

cpe:2.3:a:pureftpd:pure-ftpd:0.99.4
Pureftpd » Pure-Ftpd » Version: 0.99.9

cpe:2.3:a:pureftpd:pure-ftpd:0.99.9
Pureftpd » Pure-Ftpd » Version: 0.99a

cpe:2.3:a:pureftpd:pure-ftpd:0.99a
Pureftpd » Pure-Ftpd » Version: 0.99b

cpe:2.3:a:pureftpd:pure-ftpd:0.99b
Pureftpd » Pure-Ftpd » Version: 0.99pre1

cpe:2.3:a:pureftpd:pure-ftpd:0.99pre1
Pureftpd » Pure-Ftpd » Version: 0.99pre2

cpe:2.3:a:pureftpd:pure-ftpd:0.99pre2
Pureftpd » Pure-Ftpd » Version: 1.0.0

cpe:2.3:a:pureftpd:pure-ftpd:1.0.0
Pureftpd » Pure-Ftpd » Version: 1.0.1

cpe:2.3:a:pureftpd:pure-ftpd:1.0.1
Pureftpd » Pure-Ftpd » Version: 1.0.10

cpe:2.3:a:pureftpd:pure-ftpd:1.0.10
Pureftpd » Pure-Ftpd » Version: 1.0.11

cpe:2.3:a:pureftpd:pure-ftpd:1.0.11
Pureftpd » Pure-Ftpd » Version: 1.0.12

cpe:2.3:a:pureftpd:pure-ftpd:1.0.12
Pureftpd » Pure-Ftpd » Version: 1.0.13

cpe:2.3:a:pureftpd:pure-ftpd:1.0.13
Pureftpd » Pure-Ftpd » Version: 1.0.13a

cpe:2.3:a:pureftpd:pure-ftpd:1.0.13a
Pureftpd » Pure-Ftpd » Version: 1.0.14

cpe:2.3:a:pureftpd:pure-ftpd:1.0.14
Pureftpd » Pure-Ftpd » Version: 1.0.15

cpe:2.3:a:pureftpd:pure-ftpd:1.0.15
Pureftpd » Pure-Ftpd » Version: 1.0.16

cpe:2.3:a:pureftpd:pure-ftpd:1.0.16
Pureftpd » Pure-Ftpd » Version: 1.0.16a

cpe:2.3:a:pureftpd:pure-ftpd:1.0.16a
Pureftpd » Pure-Ftpd » Version: 1.0.16b

cpe:2.3:a:pureftpd:pure-ftpd:1.0.16b
Pureftpd » Pure-Ftpd » Version: 1.0.16c

cpe:2.3:a:pureftpd:pure-ftpd:1.0.16c
Pureftpd » Pure-Ftpd » Version: 1.0.17

cpe:2.3:a:pureftpd:pure-ftpd:1.0.17
Pureftpd » Pure-Ftpd » Version: 1.0.17a

cpe:2.3:a:pureftpd:pure-ftpd:1.0.17a
Pureftpd » Pure-Ftpd » Version: 1.0.18

cpe:2.3:a:pureftpd:pure-ftpd:1.0.18
Pureftpd » Pure-Ftpd » Version: 1.0.19

cpe:2.3:a:pureftpd:pure-ftpd:1.0.19
Pureftpd » Pure-Ftpd » Version: 1.0.2

cpe:2.3:a:pureftpd:pure-ftpd:1.0.2
Pureftpd » Pure-Ftpd » Version: 1.0.20

cpe:2.3:a:pureftpd:pure-ftpd:1.0.20
Pureftpd » Pure-Ftpd » Version: 1.0.21

cpe:2.3:a:pureftpd:pure-ftpd:1.0.21
Pureftpd » Pure-Ftpd » Version: 1.0.22

cpe:2.3:a:pureftpd:pure-ftpd:1.0.22
Pureftpd » Pure-Ftpd » Version: 1.0.23

cpe:2.3:a:pureftpd:pure-ftpd:1.0.23
Pureftpd » Pure-Ftpd » Version: 1.0.24

cpe:2.3:a:pureftpd:pure-ftpd:1.0.24
Pureftpd » Pure-Ftpd » Version: 1.0.25

cpe:2.3:a:pureftpd:pure-ftpd:1.0.25
Pureftpd » Pure-Ftpd » Version: 1.0.26

cpe:2.3:a:pureftpd:pure-ftpd:1.0.26
Pureftpd » Pure-Ftpd » Version: 1.0.27

cpe:2.3:a:pureftpd:pure-ftpd:1.0.27
Pureftpd » Pure-Ftpd » Version: 1.0.28

cpe:2.3:a:pureftpd:pure-ftpd:1.0.28
Pureftpd » Pure-Ftpd » Version: 1.0.29

cpe:2.3:a:pureftpd:pure-ftpd:1.0.29
Pureftpd » Pure-Ftpd » Version: 1.0.3

cpe:2.3:a:pureftpd:pure-ftpd:1.0.3
Pureftpd » Pure-Ftpd » Version: 1.0.4

cpe:2.3:a:pureftpd:pure-ftpd:1.0.4
Pureftpd » Pure-Ftpd » Version: 1.0.5

cpe:2.3:a:pureftpd:pure-ftpd:1.0.5
Pureftpd » Pure-Ftpd » Version: 1.0.6

cpe:2.3:a:pureftpd:pure-ftpd:1.0.6
Pureftpd » Pure-Ftpd » Version: 1.0.7

cpe:2.3:a:pureftpd:pure-ftpd:1.0.7
Pureftpd » Pure-Ftpd » Version: 1.0.8

cpe:2.3:a:pureftpd:pure-ftpd:1.0.8
Pureftpd » Pure-Ftpd » Version: 1.0.9

cpe:2.3:a:pureftpd:pure-ftpd:1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1575

Products

Pricing

Contact Us