CVEvulnerability

CVE-2011-3171

3.6 LOW Published 2011-11-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-11-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-22

Description

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.

Affected configurations

• pureftpd pure-ftpd (<= 1.0.22) • pureftpd pure-ftpd 0.90 • pureftpd pure-ftpd 0.91 • pureftpd pure-ftpd 0.92 • pureftpd pure-ftpd 0.93 • pureftpd pure-ftpd 0.94 • pureftpd pure-ftpd 0.95 • pureftpd pure-ftpd 0.95.1 • pureftpd pure-ftpd 0.95.2 • pureftpd pure-ftpd 0.96 • pureftpd pure-ftpd 0.96.1 • pureftpd pure-ftpd 0.97 • pureftpd pure-ftpd 0.97-final • pureftpd pure-ftpd 0.97.1 • pureftpd pure-ftpd 0.97.2 • pureftpd pure-ftpd 0.97.3 • pureftpd pure-ftpd 0.97.4 • pureftpd pure-ftpd 0.97.5 • pureftpd pure-ftpd 0.97.6 • pureftpd pure-ftpd 0.97.7 • pureftpd pure-ftpd 0.98 • pureftpd pure-ftpd 0.98.1 • pureftpd pure-ftpd 0.98.2 • pureftpd pure-ftpd 0.98.3 • pureftpd pure-ftpd 0.98.4 • pureftpd pure-ftpd 0.98.5 • pureftpd pure-ftpd 0.98.6 • pureftpd pure-ftpd 0.98.7 • pureftpd pure-ftpd 0.99 • pureftpd pure-ftpd 0.99.1 • pureftpd pure-ftpd 0.99.2 • pureftpd pure-ftpd 0.99.3 • pureftpd pure-ftpd 0.99.4 • pureftpd pure-ftpd 0.99.9 • pureftpd pure-ftpd 1.0.0 • pureftpd pure-ftpd 1.0.1 • pureftpd pure-ftpd 1.0.2 • pureftpd pure-ftpd 1.0.3 • pureftpd pure-ftpd 1.0.4 • pureftpd pure-ftpd 1.0.5 • pureftpd pure-ftpd 1.0.6 • pureftpd pure-ftpd 1.0.7 • pureftpd pure-ftpd 1.0.8 • pureftpd pure-ftpd 1.0.9 • pureftpd pure-ftpd 1.0.10 • pureftpd pure-ftpd 1.0.11 • pureftpd pure-ftpd 1.0.12 • pureftpd pure-ftpd 1.0.13 • pureftpd pure-ftpd 1.0.14 • pureftpd pure-ftpd 1.0.15 • pureftpd pure-ftpd 1.0.16 • pureftpd pure-ftpd 1.0.17 • pureftpd pure-ftpd 1.0.18 • pureftpd pure-ftpd 1.0.19 • pureftpd pure-ftpd 1.0.20 • pureftpd pure-ftpd 1.0.21

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References