Vulnerabilities (CVE)

Filtered by vendor Vsftpd Project Subscribe
Filtered by product Vsftpd
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-30047 1 Vsftpd Project 1 Vsftpd 2023-08-25 N/A 7.5 HIGH
VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
CVE-2011-2523 2 Debian, Vsftpd Project 2 Debian Linux, Vsftpd 2021-04-12 10.0 HIGH 9.8 CRITICAL
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
CVE-2011-0762 6 Canonical, Debian, Fedoraproject and 3 more 6 Ubuntu Linux, Debian Linux, Fedora and 3 more 2021-03-04 4.0 MEDIUM N/A
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.