PT-2004-1743 · Pure Ftpd · Pure-Ftpd

Publicado 2004-07-13 · Atualizado 2017-07-11 · CVE-2004-0656

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PureFTPd versions 1.0.18 and earlier

Description The issue allows remote attackers to cause a denial of service by exceeding the maximum number of connections, specifically through the accept client function.

Recommendations For PureFTPd versions 1.0.18 and earlier, consider restricting the number of connections to prevent denial of service attacks until a patch is available. As a temporary workaround, limiting the maximum number of connections may help mitigate the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-0656

Produtos afetados

Pure-Ftpd

Referências · 7

• http://gentoo.org/security/en/glsa/glsa-200407-04.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0656 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0656 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0656 · Aviso do Fabricante
• http://pureftpd.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0656 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16611 · Nota