Approved changes feed: RSS · Atom

cpe:2.3:a:pureftpd:pure-ftpd:1.0.29:*:*:*:*:*:*:*

part: a version: 1.0.29 update: *

VendorPureftpd (dbb5012b-c2d3-5ce9-8789-befa10275e16)
ProductPure Ftpd (679c2fbf-8cc3-5f0d-8949-b20b9a84d3dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pure-ftpd purl2cpe 2026-06-01 10:14:53.847293
pkg:deb/ubuntu/pure-ftpd purl2cpe 2026-06-01 10:14:53.847294
pkg:github/jedisct1/pure-ftpd purl2cpe 2026-06-01 10:14:53.847295
pkg:rpm/fedora/pure-ftpd purl2cpe 2026-06-01 10:14:53.847297
pkg:rpm/opensuse/pure-ftpd purl2cpe 2026-06-01 10:14:53.847298

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0418 vulnerable 2026-06-08 04:56:37.011786 Details available
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.
Published: 2011-05-24T23:00:00.000Z
Updated: 2024-08-06T21:51:08.688Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.