Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pure-FTPd和NetBSD 安全漏洞
Vulnerability Description
NetBSD是NetBSD基金会的一套开源的类Unix操作系统。Pure-FTPd是一款FTP(文件传输协议)服务器。 Pure-FTPd 1.0.32之前版本和NetBSD 5.1 版本存在安全漏洞,该漏洞源于glob实现不能正确扩展含有大括号的表达式。远程认证用户可以借助特制的FTP STAT命令使受影响计算机失去响应,拒绝服务合法用户。
CVSS Information
N/A
Vulnerability Type
N/A