PT-2011-1043 · Vsftpd+1 · Vsftpd+1

Maksymilian Arciemowicz · Published 2011-03-02 · Updated 2021-03-04 · CVE-2011-0762

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions vsftpd versions prior to 2.3.3

Description The issue allows remote authenticated users to cause a denial of service, consuming all CPU and exhausting process slots, through crafted glob expressions in STAT commands in multiple FTP sessions. This can lead to disruption of protected information availability. The exploitation can be carried out remotely.

Recommendations For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vsf filename passes filter function in ls.c to minimize the risk of exploitation. Avoid using crafted glob expressions in STAT commands until the issue is resolved.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2015-02948

CVE-2011-0762

DSA-2305-1

RHSA-2011:0337

RHSA-2011_0337

Affected Products

Red Hat

Vsftpd

References · 37

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ftp/vsftpd_232.rb · Exploit
• 🔥 http://exploit-db.com/exploits/16270 · Exploit
• 🔥 http://securityreason.com/securityalert/8109 · Exploit
• 🔥 https://exploit-db.com/exploits/16270 · Exploit
• 🔥 http://securityreason.com/achievement_securityalert/95 · Exploit
• 🔥 http://securityfocus.com/bid/46617 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0762 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0762 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2305 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0337.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0762 · Vendor Advisory