NVD

Id
7487  
Name
CVE-2011-0418  
Description
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-05-24  
Modified Date
2011-09-21  
Seq
2011-0418  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42143 7487 CVE-2011-0418 http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c#rev1.28  View
42144 7487 CVE-2011-0418 http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c.diff?r1=1.27&r2=1.28&f=h  View
42145 7487 CVE-2011-0418 20110502 Multiple Vendors libc/glob(3) GLOB_BRACE|GLOB_LIMIT memory exhaustion  View
42146 7487 CVE-2011-0418 8228  View
42147 7487 CVE-2011-0418 MDVSA-2011:094  View
42148 7487 CVE-2011-0418 http://www.pureftpd.org/project/pure-ftpd/news  View
42149 7487 CVE-2011-0418 47671  View
42150 7487 CVE-2011-0418 ADV-2011-1273  View
42151 7487 CVE-2011-0418 https://bugzilla.redhat.com/show_bug.cgi?id=704283  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33864 JVNDB-2011-004106 Pure-FTPd および NetBSD の glob 実装におけるサービス運用妨害 (DoS) の脆弱性 Pure-FTPd の glob 実装、および NetBSD の libc の glob 実装は、中括弧 (｛｝) を含む形式を適切に展開しないため、サービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-0418 48325 CVE-2011-0418 7487 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004106.html 2011-05-24 2012-03-27 View