CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2011-0988
https://notcve.org/view.php?id=CVE-2011-0988
18 Apr 2011 — pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors. pure-ftpd 1.0.22, tal como se utiliza en SUSE Linux Enterprise Server 10 Service Pack 3 y Service Pack 4, y Enterprise Desktop 10 Service Pack 3 y Service Pack 4, cuando se ejecutan las extensiones OES Netware, crea un directo... • http://secunia.com/advisories/44039 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0CVE-2004-0656
https://notcve.org/view.php?id=CVE-2004-0656
13 Jul 2004 — The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections. La función accpt_client en PureFTPd 1.0.18 y anteriores permite a atacantes remotos causar una denegación de servicio excediendo el máximo número de conexiones. • http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml •