CVE-2011-1575 : Detail

CVE-2011-1575

82.47%V3
Network
2011-05-23
20h00 +00:00
2014-02-10
15h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-399 Category : Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Metrics

Metrics Score Severity CVSS Vector Source
V2 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Pureftpd>>Pure-ftpd >> Version To (including) 1.0.29

Pureftpd>>Pure-ftpd >> Version 0.90

Pureftpd>>Pure-ftpd >> Version 0.91

Pureftpd>>Pure-ftpd >> Version 0.92

Pureftpd>>Pure-ftpd >> Version 0.93

Pureftpd>>Pure-ftpd >> Version 0.94

Pureftpd>>Pure-ftpd >> Version 0.95

Pureftpd>>Pure-ftpd >> Version 0.95-pre1

    Pureftpd>>Pure-ftpd >> Version 0.95-pre2

      Pureftpd>>Pure-ftpd >> Version 0.95-pre3

        Pureftpd>>Pure-ftpd >> Version 0.95-pre4

          Pureftpd>>Pure-ftpd >> Version 0.95.1

          Pureftpd>>Pure-ftpd >> Version 0.95.2

          Pureftpd>>Pure-ftpd >> Version 0.96

          Pureftpd>>Pure-ftpd >> Version 0.96.1

          Pureftpd>>Pure-ftpd >> Version 0.96pre1

            Pureftpd>>Pure-ftpd >> Version 0.97-final

            Pureftpd>>Pure-ftpd >> Version 0.97.1

            Pureftpd>>Pure-ftpd >> Version 0.97.2

            Pureftpd>>Pure-ftpd >> Version 0.97.3

            Pureftpd>>Pure-ftpd >> Version 0.97.4

            Pureftpd>>Pure-ftpd >> Version 0.97.5

            Pureftpd>>Pure-ftpd >> Version 0.97.6

            Pureftpd>>Pure-ftpd >> Version 0.97.7

            Pureftpd>>Pure-ftpd >> Version 0.97.7pre1

              Pureftpd>>Pure-ftpd >> Version 0.97.7pre2

                Pureftpd>>Pure-ftpd >> Version 0.97.7pre3

                  Pureftpd>>Pure-ftpd >> Version 0.97pre1

                    Pureftpd>>Pure-ftpd >> Version 0.97pre2

                      Pureftpd>>Pure-ftpd >> Version 0.97pre3

                        Pureftpd>>Pure-ftpd >> Version 0.97pre4

                          Pureftpd>>Pure-ftpd >> Version 0.97pre5

                            Pureftpd>>Pure-ftpd >> Version 0.98-final

                              Pureftpd>>Pure-ftpd >> Version 0.98.1

                              Pureftpd>>Pure-ftpd >> Version 0.98.2

                              Pureftpd>>Pure-ftpd >> Version 0.98.2a

                                Pureftpd>>Pure-ftpd >> Version 0.98.3

                                Pureftpd>>Pure-ftpd >> Version 0.98.4

                                Pureftpd>>Pure-ftpd >> Version 0.98.5

                                Pureftpd>>Pure-ftpd >> Version 0.98.6

                                Pureftpd>>Pure-ftpd >> Version 0.98.7

                                Pureftpd>>Pure-ftpd >> Version 0.98pre1

                                  Pureftpd>>Pure-ftpd >> Version 0.98pre2

                                    Pureftpd>>Pure-ftpd >> Version 0.99

                                    Pureftpd>>Pure-ftpd >> Version 0.99.1

                                    Pureftpd>>Pure-ftpd >> Version 0.99.1a

                                      Pureftpd>>Pure-ftpd >> Version 0.99.1b

                                        Pureftpd>>Pure-ftpd >> Version 0.99.2

                                        Pureftpd>>Pure-ftpd >> Version 0.99.2a

                                          Pureftpd>>Pure-ftpd >> Version 0.99.3

                                          Pureftpd>>Pure-ftpd >> Version 0.99.4

                                          Pureftpd>>Pure-ftpd >> Version 0.99.9

                                          Pureftpd>>Pure-ftpd >> Version 0.99a

                                            Pureftpd>>Pure-ftpd >> Version 0.99b

                                              Pureftpd>>Pure-ftpd >> Version 0.99pre1

                                                Pureftpd>>Pure-ftpd >> Version 0.99pre2

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.0

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.1

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.2

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.3

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.4

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.5

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.6

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.7

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.8

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.9

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.10

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.11

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.12

                                                  Pureftpd>>Pure-ftpd >> Version 1.0.13a

                                                    Pureftpd>>Pure-ftpd >> Version 1.0.14

                                                    Pureftpd>>Pure-ftpd >> Version 1.0.15

                                                    Pureftpd>>Pure-ftpd >> Version 1.0.16a

                                                      Pureftpd>>Pure-ftpd >> Version 1.0.16b

                                                        Pureftpd>>Pure-ftpd >> Version 1.0.16c

                                                          Pureftpd>>Pure-ftpd >> Version 1.0.17

                                                          Pureftpd>>Pure-ftpd >> Version 1.0.17a

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.18

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.19

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.20

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.21

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.22

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.24

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.25

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.26

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.27

                                                            Pureftpd>>Pure-ftpd >> Version 1.0.28

                                                            References

                                                            http://openwall.com/lists/oss-security/2011/04/11/14
                                                            Tags : mailing-list, x_refsource_MLIST
                                                            http://secunia.com/advisories/43988
                                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                                            http://openwall.com/lists/oss-security/2011/04/11/7
                                                            Tags : mailing-list, x_refsource_MLIST
                                                            http://secunia.com/advisories/44548
                                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                                            http://openwall.com/lists/oss-security/2011/04/11/8
                                                            Tags : mailing-list, x_refsource_MLIST
                                                            http://openwall.com/lists/oss-security/2011/04/11/3
                                                            Tags : mailing-list, x_refsource_MLIST