CVE-2011-3171

EPSS 0.02%
Published 04.11.2011 21:55:02
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Pureftpd ≫ Pure-ftpd Version <= 1.0.22

   Suse ≫ Linux Enterprise Desktop Version10 Updatesp4
   Suse ≫ Linux Enterprise Desktop Version11 Updatesp1
   Suse ≫ Linux Enterprise Server Version10 Updatesp3
   Suse ≫ Linux Enterprise Server Version10 Updatesp4
   Suse ≫ Linux Enterprise Server Version11 Updatesp1
   Suse ≫ Linux Enterprise Server Version11 Updatesp1 Editionvmware

Pureftpd ≫ Pure-ftpd Version0.90

Pureftpd ≫ Pure-ftpd Version0.91

Pureftpd ≫ Pure-ftpd Version0.92

Pureftpd ≫ Pure-ftpd Version0.93

Pureftpd ≫ Pure-ftpd Version0.94

Pureftpd ≫ Pure-ftpd Version0.95

Pureftpd ≫ Pure-ftpd Version0.95 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.95 Updatepre2

Pureftpd ≫ Pure-ftpd Version0.95 Updatepre3

Pureftpd ≫ Pure-ftpd Version0.95 Updatepre4

Pureftpd ≫ Pure-ftpd Version0.95.1

Pureftpd ≫ Pure-ftpd Version0.95.2

Pureftpd ≫ Pure-ftpd Version0.96

Pureftpd ≫ Pure-ftpd Version0.96 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.96.1

Pureftpd ≫ Pure-ftpd Version0.97 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.97 Updatepre2

Pureftpd ≫ Pure-ftpd Version0.97 Updatepre3

Pureftpd ≫ Pure-ftpd Version0.97 Updatepre4

Pureftpd ≫ Pure-ftpd Version0.97 Updatepre5

Pureftpd ≫ Pure-ftpd Version0.97-final

Pureftpd ≫ Pure-ftpd Version0.97.1

Pureftpd ≫ Pure-ftpd Version0.97.2

Pureftpd ≫ Pure-ftpd Version0.97.3

Pureftpd ≫ Pure-ftpd Version0.97.4

Pureftpd ≫ Pure-ftpd Version0.97.5

Pureftpd ≫ Pure-ftpd Version0.97.6

Pureftpd ≫ Pure-ftpd Version0.97.7

Pureftpd ≫ Pure-ftpd Version0.97.7 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.97.7 Updatepre2

Pureftpd ≫ Pure-ftpd Version0.97.7 Updatepre3

Pureftpd ≫ Pure-ftpd Version0.98 Updatefinal

Pureftpd ≫ Pure-ftpd Version0.98 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.98 Updatepre2

Pureftpd ≫ Pure-ftpd Version0.98.1

Pureftpd ≫ Pure-ftpd Version0.98.2

Pureftpd ≫ Pure-ftpd Version0.98.2 Updatea

Pureftpd ≫ Pure-ftpd Version0.98.3

Pureftpd ≫ Pure-ftpd Version0.98.4

Pureftpd ≫ Pure-ftpd Version0.98.5

Pureftpd ≫ Pure-ftpd Version0.98.6

Pureftpd ≫ Pure-ftpd Version0.98.7

Pureftpd ≫ Pure-ftpd Version0.99

Pureftpd ≫ Pure-ftpd Version0.99 Updatea

Pureftpd ≫ Pure-ftpd Version0.99 Updateb

Pureftpd ≫ Pure-ftpd Version0.99 Updatepre1

Pureftpd ≫ Pure-ftpd Version0.99 Updatepre2

Pureftpd ≫ Pure-ftpd Version0.99.1

Pureftpd ≫ Pure-ftpd Version0.99.1 Updatea

Pureftpd ≫ Pure-ftpd Version0.99.1 Updateb

Pureftpd ≫ Pure-ftpd Version0.99.2

Pureftpd ≫ Pure-ftpd Version0.99.2 Updatea

Pureftpd ≫ Pure-ftpd Version0.99.3

Pureftpd ≫ Pure-ftpd Version0.99.4

Pureftpd ≫ Pure-ftpd Version0.99.9

Pureftpd ≫ Pure-ftpd Version1.0.0

Pureftpd ≫ Pure-ftpd Version1.0.1

Pureftpd ≫ Pure-ftpd Version1.0.2

Pureftpd ≫ Pure-ftpd Version1.0.3

Pureftpd ≫ Pure-ftpd Version1.0.4

Pureftpd ≫ Pure-ftpd Version1.0.5

Pureftpd ≫ Pure-ftpd Version1.0.6

Pureftpd ≫ Pure-ftpd Version1.0.7

Pureftpd ≫ Pure-ftpd Version1.0.8

Pureftpd ≫ Pure-ftpd Version1.0.9

Pureftpd ≫ Pure-ftpd Version1.0.10

Pureftpd ≫ Pure-ftpd Version1.0.11

Pureftpd ≫ Pure-ftpd Version1.0.12

Pureftpd ≫ Pure-ftpd Version1.0.13 Updatea

Pureftpd ≫ Pure-ftpd Version1.0.14

Pureftpd ≫ Pure-ftpd Version1.0.15

Pureftpd ≫ Pure-ftpd Version1.0.16 Updatea

Pureftpd ≫ Pure-ftpd Version1.0.16 Updateb

Pureftpd ≫ Pure-ftpd Version1.0.16 Updatec

Pureftpd ≫ Pure-ftpd Version1.0.17

Pureftpd ≫ Pure-ftpd Version1.0.17 Updatea

Pureftpd ≫ Pure-ftpd Version1.0.18

Pureftpd ≫ Pure-ftpd Version1.0.19

Pureftpd ≫ Pure-ftpd Version1.0.20

Pureftpd ≫ Pure-ftpd Version1.0.21

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.035

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:N/I:P/A:P

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html

http://www.securityfocus.com/bid/49541

https://exchange.xforce.ibmcloud.com/vulnerabilities/69686

https://nvd.nist.gov/vuln/detail/CVE-2011-3171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3171

EUVD