CVE-2011-0762
CVE-2011-0762
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
EPSS 73.9% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.html
- http://marc.info/?l=bugtraq&m=133226187115472&w=2
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.html
- http://www.vupen.com/english/advisories/2011/0639
- http://www.vupen.com/english/advisories/2011/0668
- http://www.debian.org/security/2011/dsa-2305
- http://www.securityfocus.com/archive/1/516748/100/0/threaded
- http://securityreason.com/securityalert/8109
- http://www.vupen.com/english/advisories/2011/0547
- http://www.exploit-db.com/exploits/16270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65873
- http://cxib.net/stuff/vspoc232.c
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:049
- http://www.vupen.com/english/advisories/2011/0713
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.html
- http://www.ubuntu.com/usn/USN-1098-1
- http://www.kb.cert.org/vuls/id/590604
- http://www.securitytracker.com/id?1025186
- http://www.securityfocus.com/bid/46617
- http://securityreason.com/achievement_securityalert/95
- http://www.redhat.com/support/errata/RHSA-2011-0337.html
- https://nvd.nist.gov/vuln/detail/CVE-2011-0762