Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2024-48208

CWE-125 — Out-of-bounds Read6 documents6 sources
Severity
8.6HIGH
EPSS
43.7%
top 2.48%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Pureftpd Pure-ftpd
Timeline
PublishedOct 24

Description

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HExploitability: 3.9 | Impact: 4.7

Affected Packages1 packages

▶NVDpureftpd/pure-ftpd< 1.0.52

🔴Vulnerability Details

3
CVEList
CVE-2024-48208: pure-ftpd before 1↗2024-10-24
▶
GHSA
GHSA-rrmj-qxgv-v296: pure-ftpd before 1↗2024-10-24
▶
OSV
CVE-2024-48208: pure-ftpd before 1↗2024-10-24
▶

💥Exploits & PoCs

1
Nuclei
Pure-FTPd < 1.0.52 - Buffer Overflow
▶

📋Vendor Advisories

1
Debian
CVE-2024-48208: pure-ftpd - pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bou...↗2024
▶