Approved changes feed: RSS · Atom

cpe:2.3:a:jesse_smith:bftpd:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorJesse Smith (d45f4fe7-1045-529c-aeb7-6f8a70757e0c)
ProductBftpd (107965a5-e771-539e-92d1-f7a67e90a81b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gamman/bftpd purl2cpe 2026-06-01 10:11:37.982724
pkg:rpm/opensuse/bftpd purl2cpe 2026-06-01 10:11:37.982726
pkg:sourceforge/bftpd purl2cpe 2026-06-01 10:11:37.982727

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4593 vulnerable 2026-06-08 04:51:49.062514 Details available
The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.bu_host structure member, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Published: 2010-01-07T18:13:00.000Z
Updated: 2024-09-17T03:44:09.569Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.