Pure Ftpd · Pure-Ftpd · CVE-2024-48208
**Name of the Vulnerable Software and Affected Versions**
Pure-FTPd versions prior to 1.0.52
**Description**
The issue is related to the domlsd() function in the ls.c file of the Pure-FTPd FTP server, which is associated with an out of bounds read in memory. This can be exploited by a remote attacker to disrupt the user's connection to the server.
**Recommendations**
For versions prior to 1.0.52, update to version 1.0.52 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable domlsd() function until a patch is available.