CVE-2011-0418

Publication date 24 May 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.

Status

Package Ubuntu Release Status
pure-ftpd 13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities