CVE-2011-0418

The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows…

published May 24, 2011

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07255 · 94.3th percentile
Published
2011-05-24T23:00Z
EPSS history
Timeline
  • 24 MAY 23:00Z
    The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows…
    cvelistv5