CVE-2011-0762
published 2011-03-02CVE-2011-0762: The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and…
PriorityP337medium4CVSS 2.0
AVNACLAuSCNINAP
EXPLOIT
EPSS
73.95%
99.4th percentile
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | vsftpd | < vsftpd 2.3.4-1 (bookworm) | vsftpd 2.3.4-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| vsftpd_project | vsftpd | < 2.3.3 | 2.3.3 |
| vsftpd_project | vsftpd | >= 0 < 2.3.4-1 | 2.3.4-1 |
| vsftpd_project | vsftpd | >= 0 < 2.3.4-1 | 2.3.4-1 |
| vsftpd_project | vsftpd | >= 0 < 2.3.4-1 | 2.3.4-1 |
| vsftpd_project | vsftpd | >= 0 < 2.3.4-1 | 2.3.4-1 |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jh3r-4mfv-pjv8: The vsf_filename_passes_filter function in ls
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2011-0762 [HIGH] CWE-400 GHSA-jh3r-4mfv-pjv8: The vsf_filename_passes_filter function in ls
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
OSV
CVE-2011-0762: The vsf_filename_passes_filter function in ls
osv·2011-03-02·CVSS 7.8
CVE-2011-0762 [HIGH] CVE-2011-0762: The vsf_filename_passes_filter function in ls
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Ubuntu
vsftpd vulnerability
vendor_ubuntu·2011-03-29
CVE-2011-0762 vsftpd vulnerability
Title: vsftpd vulnerability
Summary: An attacker could send crafted input to vsftpd and cause it to crash.
It was discovered that vsftpd incorrectly handled certain glob expressions.
A remote authenticated user could use a crafted glob expression to cause
vftpd to consume all resources, leading to a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
vsftpd: remote DoS via crafted glob pattern
vendor_redhat·2011-03-01·CVSS 7.8
CVE-2011-0762 [HIGH] vsftpd: remote DoS via crafted glob pattern
vsftpd: remote DoS via crafted glob pattern
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Debian
CVE-2011-0762: vsftpd - The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows re...
vendor_debian·2011·CVSS 7.8
CVE-2011-0762 [HIGH] CVE-2011-0762: vsftpd - The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows re...
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Scope: local
bookworm: resolved (fixed in 2.3.4-1)
bullseye: resolved (fixed in 2.3.4-1)
forky: resolved (fixed in 2.3.4-1)
sid: resolved (fixed in 2.3.4-1)
trixie: resolved (fixed in 2.3.4-1)
No detection rules found.
Exploit-DB
vsftpd 2.3.2 - Denial of Service
exploitdb·2011-03-02·CVSS 4.0
CVE-2011-0762 [MEDIUM] vsftpd 2.3.2 - Denial of Service
vsftpd 2.3.2 - Denial of Service
---
#include
#include
#include
#include
#include
#include
#include
/*
This is code of
http://cxib.net/stuff/vspoc232.c
PoC CVE-2011-0762 ( vsftpd )
Remote Denial of Service
Affected: 2.3.2
Fix: 2.3.4
Author:
Maksymilian Arciemowicz
Use:
./vspoc232 127.0.0.1 21 user pass 1
or read
http://securityreason.com/achievement_securityalert/95
for more information
Example result:
cx@cx64:~$ telnet 172.5.0.129 21
Trying 172.5.0.129...
Connected to 172.5.0.129.
Escape character is '^]'.
500 OOPS: fork
Connection closed by foreign host.
*/
int skip=0;
int sendftp(int stream,char *what){
if(-1==send(stream,what,strlen(what),0))
printf("Can't send %s\n",what);
else
printf("send: %s\n",what);
bzero(what,sizeof(what));
}
void readftp(int stream){
char readline
Nuclei
vsftpd < 2.3.3 - DoS
nuclei·CVSS 7.8
CVE-2011-0762 [HIGH] vsftpd < 2.3.3 - DoS
vsftpd < 2.3.3 - DoS
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Template:
id: CVE-2011-0762
info:
name: vsftpd < 2.3.3 - DoS
author: pussycat0x
severity: medium
description: |
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
impact: |
Authenticated attackers can send crafted glob expressions
Metasploit
VSFTPD 2.3.2 Denial of Service
metasploit
VSFTPD 2.3.2 Denial of Service
VSFTPD 2.3.2 Denial of Service
This module triggers a Denial of Service condition in the VSFTPD server in versions before 2.3.3. So far, it has been tested on 2.3.0, 2.3.1, and 2.3.2.
Bugzilla
CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern [fedora-all]
bugzilla·2011-03-03·CVSS 4.0
CVE-2011-0762 [MEDIUM] CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern [fedora-all]
CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=681667
Please note: this issue affects multiple sup
Bugzilla
CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern
bugzilla·2011-03-02·CVSS 7.8
CVE-2011-0762 [HIGH] CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern
CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-0762 to
the following vulnerability:
Name: CVE-2011-0762
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0762
Assigned: 20110203
Reference: http://securityreason.com/achievement_securityalert/95
Reference: http://www.securityfocus.com/archive/1/archive/1/516748/100/0/threaded
Reference: http://cxib.net/stuff/vspoc232.c
Reference: ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changelog
Reference: http://www.kb.cert.org/vuls/id/590604
Reference: http://www.securityfocus.com/bid/46617
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3
allows remote authenticated users to cause a denial of service (CPU
consumption and proces
ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changeloghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741http://cxib.net/stuff/vspoc232.chttp://jvn.jp/en/jp/JVN37417423/index.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlhttp://marc.info/?l=bugtraq&m=133226187115472&w=2http://securityreason.com/achievement_securityalert/95http://securityreason.com/securityalert/8109http://www.debian.org/security/2011/dsa-2305http://www.exploit-db.com/exploits/16270http://www.kb.cert.org/vuls/id/590604http://www.mandriva.com/security/advisories?name=MDVSA-2011:049http://www.redhat.com/support/errata/RHSA-2011-0337.htmlhttp://www.securityfocus.com/archive/1/516748/100/0/threadedhttp://www.securityfocus.com/bid/46617http://www.securitytracker.com/id?1025186http://www.ubuntu.com/usn/USN-1098-1http://www.vupen.com/english/advisories/2011/0547http://www.vupen.com/english/advisories/2011/0639http://www.vupen.com/english/advisories/2011/0668http://www.vupen.com/english/advisories/2011/0713https://exchange.xforce.ibmcloud.com/vulnerabilities/65873ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changeloghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741http://cxib.net/stuff/vspoc232.chttp://jvn.jp/en/jp/JVN37417423/index.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlhttp://marc.info/?l=bugtraq&m=133226187115472&w=2http://securityreason.com/achievement_securityalert/95http://securityreason.com/securityalert/8109http://www.debian.org/security/2011/dsa-2305http://www.exploit-db.com/exploits/16270http://www.kb.cert.org/vuls/id/590604http://www.mandriva.com/security/advisories?name=MDVSA-2011:049http://www.redhat.com/support/errata/RHSA-2011-0337.htmlhttp://www.securityfocus.com/archive/1/516748/100/0/threadedhttp://www.securityfocus.com/bid/46617http://www.securitytracker.com/id?1025186http://www.ubuntu.com/usn/USN-1098-1http://www.vupen.com/english/advisories/2011/0547http://www.vupen.com/english/advisories/2011/0639http://www.vupen.com/english/advisories/2011/0668http://www.vupen.com/english/advisories/2011/0713https://exchange.xforce.ibmcloud.com/vulnerabilities/65873
2011-03-02
Published