CVE-2011-3171

EPSS 0.59%
Veröffentlicht 04.11.2011 21:55:02
Zuletzt bearbeitet 16.06.2026 23:32:47
Erkennungen
Login

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 81 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pureftpd ≫ Pure-ftpd Version <= 1.0.22

   Suse ≫ Linux Enterprise Desktop Version 10 Update sp4
   Suse ≫ Linux Enterprise Desktop Version 11 Update sp1
   Suse ≫ Linux Enterprise Server Version 10 Update sp3
   Suse ≫ Linux Enterprise Server Version 10 Update sp4
   Suse ≫ Linux Enterprise Server Version 11 Update sp1
   Suse ≫ Linux Enterprise Server Version 11 Update sp1 Edition vmware

Pureftpd ≫ Pure-ftpd Version 0.90

Pureftpd ≫ Pure-ftpd Version 0.91

Pureftpd ≫ Pure-ftpd Version 0.92

Pureftpd ≫ Pure-ftpd Version 0.93

Pureftpd ≫ Pure-ftpd Version 0.94

Pureftpd ≫ Pure-ftpd Version 0.95

Pureftpd ≫ Pure-ftpd Version 0.95 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.95 Update pre2

Pureftpd ≫ Pure-ftpd Version 0.95 Update pre3

Pureftpd ≫ Pure-ftpd Version 0.95 Update pre4

Pureftpd ≫ Pure-ftpd Version 0.95.1

Pureftpd ≫ Pure-ftpd Version 0.95.2

Pureftpd ≫ Pure-ftpd Version 0.96

Pureftpd ≫ Pure-ftpd Version 0.96 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.96.1

Pureftpd ≫ Pure-ftpd Version 0.97 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.97 Update pre2

Pureftpd ≫ Pure-ftpd Version 0.97 Update pre3

Pureftpd ≫ Pure-ftpd Version 0.97 Update pre4

Pureftpd ≫ Pure-ftpd Version 0.97 Update pre5

Pureftpd ≫ Pure-ftpd Version 0.97-final

Pureftpd ≫ Pure-ftpd Version 0.97.1

Pureftpd ≫ Pure-ftpd Version 0.97.2

Pureftpd ≫ Pure-ftpd Version 0.97.3

Pureftpd ≫ Pure-ftpd Version 0.97.4

Pureftpd ≫ Pure-ftpd Version 0.97.5

Pureftpd ≫ Pure-ftpd Version 0.97.6

Pureftpd ≫ Pure-ftpd Version 0.97.7

Pureftpd ≫ Pure-ftpd Version 0.97.7 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.97.7 Update pre2

Pureftpd ≫ Pure-ftpd Version 0.97.7 Update pre3

Pureftpd ≫ Pure-ftpd Version 0.98 Update final

Pureftpd ≫ Pure-ftpd Version 0.98 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.98 Update pre2

Pureftpd ≫ Pure-ftpd Version 0.98.1

Pureftpd ≫ Pure-ftpd Version 0.98.2

Pureftpd ≫ Pure-ftpd Version 0.98.2 Update a

Pureftpd ≫ Pure-ftpd Version 0.98.3

Pureftpd ≫ Pure-ftpd Version 0.98.4

Pureftpd ≫ Pure-ftpd Version 0.98.5

Pureftpd ≫ Pure-ftpd Version 0.98.6

Pureftpd ≫ Pure-ftpd Version 0.98.7

Pureftpd ≫ Pure-ftpd Version 0.99

Pureftpd ≫ Pure-ftpd Version 0.99 Update a

Pureftpd ≫ Pure-ftpd Version 0.99 Update b

Pureftpd ≫ Pure-ftpd Version 0.99 Update pre1

Pureftpd ≫ Pure-ftpd Version 0.99 Update pre2

Pureftpd ≫ Pure-ftpd Version 0.99.1

Pureftpd ≫ Pure-ftpd Version 0.99.1 Update a

Pureftpd ≫ Pure-ftpd Version 0.99.1 Update b

Pureftpd ≫ Pure-ftpd Version 0.99.2

Pureftpd ≫ Pure-ftpd Version 0.99.2 Update a

Pureftpd ≫ Pure-ftpd Version 0.99.3

Pureftpd ≫ Pure-ftpd Version 0.99.4

Pureftpd ≫ Pure-ftpd Version 0.99.9

Pureftpd ≫ Pure-ftpd Version 1.0.0

Pureftpd ≫ Pure-ftpd Version 1.0.1

Pureftpd ≫ Pure-ftpd Version 1.0.2

Pureftpd ≫ Pure-ftpd Version 1.0.3

Pureftpd ≫ Pure-ftpd Version 1.0.4

Pureftpd ≫ Pure-ftpd Version 1.0.5

Pureftpd ≫ Pure-ftpd Version 1.0.6

Pureftpd ≫ Pure-ftpd Version 1.0.7

Pureftpd ≫ Pure-ftpd Version 1.0.8

Pureftpd ≫ Pure-ftpd Version 1.0.9

Pureftpd ≫ Pure-ftpd Version 1.0.10

Pureftpd ≫ Pure-ftpd Version 1.0.11

Pureftpd ≫ Pure-ftpd Version 1.0.12

Pureftpd ≫ Pure-ftpd Version 1.0.13 Update a

Pureftpd ≫ Pure-ftpd Version 1.0.14

Pureftpd ≫ Pure-ftpd Version 1.0.15

Pureftpd ≫ Pure-ftpd Version 1.0.16 Update a

Pureftpd ≫ Pure-ftpd Version 1.0.16 Update b

Pureftpd ≫ Pure-ftpd Version 1.0.16 Update c

Pureftpd ≫ Pure-ftpd Version 1.0.17

Pureftpd ≫ Pure-ftpd Version 1.0.17 Update a

Pureftpd ≫ Pure-ftpd Version 1.0.18

Pureftpd ≫ Pure-ftpd Version 1.0.19

Pureftpd ≫ Pure-ftpd Version 1.0.20

Pureftpd ≫ Pure-ftpd Version 1.0.21

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.59%	0.433

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:N/I:P/A:P

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html

http://www.securityfocus.com/bid/49541

https://exchange.xforce.ibmcloud.com/vulnerabilities/69686

https://nvd.nist.gov/vuln/detail/CVE-2011-3171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3171

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-3171