NetSight
IP …
medium4.0Public exploit code

CVE-2011-0762

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and proc…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

Affected products

VendorProductAffected versions
Vsftpd ProjectVsftpd
before 2.3.3
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10
FedoraprojectFedora
Versions 13, 14, 15
DebianDebian Linux
Versions 5.0, 6.0, 7.0
OpensuseOpensuse
Versions 11.2, 11.3, 11.4
SuseLinux Enterprise Server
Versions 9, 10, 11

Weakness classification

CWE-400

References