VulnerabilityModified
CVE-2011-3171
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite…
LOW 3.6EPSS 0.58%
Does this matter?
Lower severity and a low EPSS score (0.58%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 0.58% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- pureftpd/pure-ftpd
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html
- http://www.securityfocus.com/bid/49541
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69686
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html
- http://www.securityfocus.com/bid/49541
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69686
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.