CVE-2011-0762
Medium
Description
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
SeverityMedium
CVSS4.0
Exploit probability99. percentile73.9%
Product
Vsftpd
PublishedMar 2, 2011
First seenMar 2, 2011
How to fix
Update
- vsftpd_project vsftpd2.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vsftpd_project vsftpd | v < 2.3.3 | 2.3.3 |
| canonical ubuntu_linux | 6.06, 8.04, 9.10, 10.04, 10.10 | — |
| fedoraproject fedora | 13, 14, 15 | — |
| debian debian_linux | 5.0, 6.0, 7.0 | — |
| opensuse opensuse | 11.2, 11.3, 11.4 | — |
| suse linux_enterprise_server | 9, 10, 11 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.