// For flags

CVE-2011-1575

 

Severity Score

5.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

La implementación de STARTTLS en ftp_parser.c de Pure-FTPd en versiones anteriores a 1.0.30
no restringe correctamente el buffer de entrada/salida, que permite a los atacantes a realizar "man-in-the-middle" para insertar comandos en las sesiones FTP cifradas mediante el envío de un comando en claro que se procesa después de TLS esté funcionando, se relaciona con una "inyección de comandos de texto claro" es un problema similar a CVE-2011-0411.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-04-05 CVE Reserved
  • 2011-05-23 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
<= 1.0.29
Search vendor "Pureftpd" for product "Pure-ftpd" and version " <= 1.0.29"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.90
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.90"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.91
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.91"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.92
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.92"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.93
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.93"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.94
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.94"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95-pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95-pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95-pre2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95-pre2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95-pre3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95-pre3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95-pre4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95-pre4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.95.2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.95.2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.96
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.96"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.96.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.96.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.96pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.96pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97-final
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97-final"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.5
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.5"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.6
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.6"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.7
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.7"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.7pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.7pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.7pre2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.7pre2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97.7pre3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97.7pre3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97pre2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97pre2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97pre3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97pre3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97pre4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97pre4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.97pre5
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.97pre5"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98-final
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98-final"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.2a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.2a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.5
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.5"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.6
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.6"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98.7
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98.7"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.98pre2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.98pre2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.1a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.1a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.1b
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.1b"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.2a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.2a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99.9
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99.9"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99b
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99b"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99pre1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99pre1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
0.99pre2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "0.99pre2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.0
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.0"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.1
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.1"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.2
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.2"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.3
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.3"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.4
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.4"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.5
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.5"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.6
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.6"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.7
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.7"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.8
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.8"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.9
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.9"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.10
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.10"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.11
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.11"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.12
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.12"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.13a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.13a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.14
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.14"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.15
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.15"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.16a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.16a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.16b
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.16b"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.16c
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.16c"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.17
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.17"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.17a
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.17a"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.18
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.18"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.19
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.19"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.20
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.20"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.21
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.21"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.22
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.22"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.24
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.24"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.25
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.25"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.26
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.26"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.27
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.27"
-
Affected
Pureftpd
Search vendor "Pureftpd"
Pure-ftpd
Search vendor "Pureftpd" for product "Pure-ftpd"
1.0.28
Search vendor "Pureftpd" for product "Pure-ftpd" and version "1.0.28"
-
Affected