Lucene search
MitreCVE-2011-3171HistoryNov 04, 2011 - 9:55 p.m.
CVE-2011-3171
2011-11-0421:55:02
CWE-22
mitre
web.nvd.nist.gov
26
cve-2011-3171
directory traversal
pure-ftpd
suse linux enterprise server
netware oes
vulnerability
nvd
CVSS2
3.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.
Affected configurations
Node
pureftpdpure-ftpdRange≤1.0.22
ORpureftpdpure-ftpdMatch0.90
ORpureftpdpure-ftpdMatch0.91
ORpureftpdpure-ftpdMatch0.92
ORpureftpdpure-ftpdMatch0.93
ORpureftpdpure-ftpdMatch0.94
ORpureftpdpure-ftpdMatch0.95
ORpureftpdpure-ftpdMatch0.95pre1
ORpureftpdpure-ftpdMatch0.95pre2
ORpureftpdpure-ftpdMatch0.95pre3
ORpureftpdpure-ftpdMatch0.95pre4
ORpureftpdpure-ftpdMatch0.95.1
ORpureftpdpure-ftpdMatch0.95.2
ORpureftpdpure-ftpdMatch0.96
ORpureftpdpure-ftpdMatch0.96pre1
ORpureftpdpure-ftpdMatch0.96.1
ORpureftpdpure-ftpdMatch0.97pre1
ORpureftpdpure-ftpdMatch0.97pre2
ORpureftpdpure-ftpdMatch0.97pre3
ORpureftpdpure-ftpdMatch0.97pre4
ORpureftpdpure-ftpdMatch0.97pre5
ORpureftpdpure-ftpdMatch0.97-final
ORpureftpdpure-ftpdMatch0.97.1
ORpureftpdpure-ftpdMatch0.97.2
ORpureftpdpure-ftpdMatch0.97.3
ORpureftpdpure-ftpdMatch0.97.4
ORpureftpdpure-ftpdMatch0.97.5
ORpureftpdpure-ftpdMatch0.97.6
ORpureftpdpure-ftpdMatch0.97.7
ORpureftpdpure-ftpdMatch0.97.7pre1
ORpureftpdpure-ftpdMatch0.97.7pre2
ORpureftpdpure-ftpdMatch0.97.7pre3
ORpureftpdpure-ftpdMatch0.98final
ORpureftpdpure-ftpdMatch0.98pre1
ORpureftpdpure-ftpdMatch0.98pre2
ORpureftpdpure-ftpdMatch0.98.1
ORpureftpdpure-ftpdMatch0.98.2
ORpureftpdpure-ftpdMatch0.98.2a
ORpureftpdpure-ftpdMatch0.98.3
ORpureftpdpure-ftpdMatch0.98.4
ORpureftpdpure-ftpdMatch0.98.5
ORpureftpdpure-ftpdMatch0.98.6
ORpureftpdpure-ftpdMatch0.98.7
ORpureftpdpure-ftpdMatch0.99
ORpureftpdpure-ftpdMatch0.99a
ORpureftpdpure-ftpdMatch0.99b
ORpureftpdpure-ftpdMatch0.99pre1
ORpureftpdpure-ftpdMatch0.99pre2
ORpureftpdpure-ftpdMatch0.99.1
ORpureftpdpure-ftpdMatch0.99.1a
ORpureftpdpure-ftpdMatch0.99.1b
ORpureftpdpure-ftpdMatch0.99.2
ORpureftpdpure-ftpdMatch0.99.2a
ORpureftpdpure-ftpdMatch0.99.3
ORpureftpdpure-ftpdMatch0.99.4
ORpureftpdpure-ftpdMatch0.99.9
ORpureftpdpure-ftpdMatch1.0.0
ORpureftpdpure-ftpdMatch1.0.1
ORpureftpdpure-ftpdMatch1.0.2
ORpureftpdpure-ftpdMatch1.0.3
ORpureftpdpure-ftpdMatch1.0.4
ORpureftpdpure-ftpdMatch1.0.5
ORpureftpdpure-ftpdMatch1.0.6
ORpureftpdpure-ftpdMatch1.0.7
ORpureftpdpure-ftpdMatch1.0.8
ORpureftpdpure-ftpdMatch1.0.9
ORpureftpdpure-ftpdMatch1.0.10
ORpureftpdpure-ftpdMatch1.0.11
ORpureftpdpure-ftpdMatch1.0.12
ORpureftpdpure-ftpdMatch1.0.13a
ORpureftpdpure-ftpdMatch1.0.14
ORpureftpdpure-ftpdMatch1.0.15
ORpureftpdpure-ftpdMatch1.0.16a
ORpureftpdpure-ftpdMatch1.0.16b
ORpureftpdpure-ftpdMatch1.0.16c
ORpureftpdpure-ftpdMatch1.0.17
ORpureftpdpure-ftpdMatch1.0.17a
ORpureftpdpure-ftpdMatch1.0.18
ORpureftpdpure-ftpdMatch1.0.19
ORpureftpdpure-ftpdMatch1.0.20
ORpureftpdpure-ftpdMatch1.0.21
suselinux_enterprise_desktopMatch10sp4
ORsuselinux_enterprise_desktopMatch11sp1
ORsuselinux_enterprise_serverMatch10sp3
ORsuselinux_enterprise_serverMatch10sp4
ORsuselinux_enterprise_serverMatch11sp1
ORsuselinux_enterprise_serverMatch11sp1vmware
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pureftpd | pure-ftpd | * | cpe:2.3:a:pureftpd:pure-ftpd:*:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.90 | cpe:2.3:a:pureftpd:pure-ftpd:0.90:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.91 | cpe:2.3:a:pureftpd:pure-ftpd:0.91:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.92 | cpe:2.3:a:pureftpd:pure-ftpd:0.92:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.93 | cpe:2.3:a:pureftpd:pure-ftpd:0.93:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.94 | cpe:2.3:a:pureftpd:pure-ftpd:0.94:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.95 | cpe:2.3:a:pureftpd:pure-ftpd:0.95:*:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.95 | cpe:2.3:a:pureftpd:pure-ftpd:0.95:pre1:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.95 | cpe:2.3:a:pureftpd:pure-ftpd:0.95:pre2:*:*:*:*:*:* |
| pureftpd | pure-ftpd | 0.95 | cpe:2.3:a:pureftpd:pure-ftpd:0.95:pre3:*:*:*:*:*:* |
Related
nessus
nessus
SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7723)
2011-10-24 00:00:00
SuSE 10 Security Update : pure-ftpd, pure-ftpd-debuginfo (ZYPP Patch Number 7724)
2011-12-13 00:00:00
SuSE 11.1 Security Update : pure-ftpd (SAT Patch Number 5091)
2011-12-13 00:00:00
cvelist
cvelist
CVE-2011-3171
2011-11-04 21:00:00
prion
prion
Directory traversal
2011-11-04 21:55:00
suse
suse
Security update for pure-ftpd (important)
2011-09-08 23:08:14
Security update for pure-ftpd, pure-ftpd-debuginfo (important)
2011-09-08 22:08:20
ubuntucve
ubuntucve
CVE-2011-3171
2011-11-04 00:00:00
nvd
nvd
CVE-2011-3171
2011-11-04 21:55:02
CVSS2
3.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2011-3171