Vulnerabilities > Pureftpd > Pure Ftpd > 1.0.29
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-05 | CVE-2021-40524 | Unrestricted Upload of File with Dangerous Type vulnerability in Pureftpd Pure-Ftpd In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. | 5.0 |
| 2020-02-26 | CVE-2020-9274 | Access of Uninitialized Pointer vulnerability in multiple products An issue was discovered in Pure-FTPd 1.0.49. | 7.5 |
| 2011-05-24 | CVE-2011-0418 | Improper Input Validation vulnerability in multiple products The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command. | 4.0 |
| 2011-05-23 | CVE-2011-1575 | Resource Management Errors vulnerability in Pureftpd Pure-Ftpd The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. | 5.8 |