Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2020-35359

CWE-770 — Allocation without Limits5 documents5 sources
Severity
7.5HIGH
EPSS
7.0%
top 8.52%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Pureftpd Pure-ftpd
Timeline
PublishedDec 26
Latest updateMay 24

Description

Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDpureftpd/pure-ftpd1.0.48

🔴Vulnerability Details

3
GHSA
GHSA-w7rv-vxq3-894m: Pure-FTPd 1↗2022-05-24
▶
CVEList
CVE-2020-35359: Pure-FTPd 1↗2020-12-26
▶
OSV
CVE-2020-35359: Pure-FTPd 1↗2020-12-26
▶

💥Exploits & PoCs

1
Nuclei
Pure-FTPd 1.0.48 - Denial of Service
▶