CVE-2011-1575

Published: May 23, 2011Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

Affected (87)

Products: Pureftpd: Pure Ftpd

Pureftpd

1 product

Pure Ftpd

Configuration A

87 vulnerable

Vulnerable Software	Affected Versions
Pureftpd Pure Ftpd	Up to 1.0.29
Pureftpd Pure Ftpd	Version 0.90
Pureftpd Pure Ftpd	Version 0.91
Pureftpd Pure Ftpd	Version 0.92
Pureftpd Pure Ftpd	Version 0.93
Pureftpd Pure Ftpd	Version 0.94
Pureftpd Pure Ftpd	Version 0.95-pre1
Pureftpd Pure Ftpd	Version 0.95-pre2
Pureftpd Pure Ftpd	Version 0.95-pre3
Pureftpd Pure Ftpd	Version 0.95-pre4
Pureftpd Pure Ftpd	Version 0.95.1
Pureftpd Pure Ftpd	Version 0.95.2
Pureftpd Pure Ftpd	Version 0.95
Pureftpd Pure Ftpd	Version 0.96.1
Pureftpd Pure Ftpd	Version 0.96
Pureftpd Pure Ftpd	Version 0.96pre1
Pureftpd Pure Ftpd	Version 0.97-final
Pureftpd Pure Ftpd	Version 0.97.1
Pureftpd Pure Ftpd	Version 0.97.2
Pureftpd Pure Ftpd	Version 0.97.3
Pureftpd Pure Ftpd	Version 0.97.4
Pureftpd Pure Ftpd	Version 0.97.5
Pureftpd Pure Ftpd	Version 0.97.6
Pureftpd Pure Ftpd	Version 0.97.7
Pureftpd Pure Ftpd	Version 0.97.7pre1
Pureftpd Pure Ftpd	Version 0.97.7pre2
Pureftpd Pure Ftpd	Version 0.97.7pre3
Pureftpd Pure Ftpd	Version 0.97pre1
Pureftpd Pure Ftpd	Version 0.97pre2
Pureftpd Pure Ftpd	Version 0.97pre3
Pureftpd Pure Ftpd	Version 0.97pre4
Pureftpd Pure Ftpd	Version 0.97pre5
Pureftpd Pure Ftpd	Version 0.98-final
Pureftpd Pure Ftpd	Version 0.98.1
Pureftpd Pure Ftpd	Version 0.98.2
Pureftpd Pure Ftpd	Version 0.98.2a
Pureftpd Pure Ftpd	Version 0.98.3
Pureftpd Pure Ftpd	Version 0.98.4
Pureftpd Pure Ftpd	Version 0.98.5
Pureftpd Pure Ftpd	Version 0.98.6
Pureftpd Pure Ftpd	Version 0.98.7
Pureftpd Pure Ftpd	Version 0.98pre1
Pureftpd Pure Ftpd	Version 0.98pre2
Pureftpd Pure Ftpd	Version 0.99.1
Pureftpd Pure Ftpd	Version 0.99.1a
Pureftpd Pure Ftpd	Version 0.99.1b
Pureftpd Pure Ftpd	Version 0.99.2
Pureftpd Pure Ftpd	Version 0.99.2a
Pureftpd Pure Ftpd	Version 0.99.3
Pureftpd Pure Ftpd	Version 0.99.4
Pureftpd Pure Ftpd	Version 0.99.9
Pureftpd Pure Ftpd	Version 0.99
Pureftpd Pure Ftpd	Version 0.99a
Pureftpd Pure Ftpd	Version 0.99b
Pureftpd Pure Ftpd	Version 0.99pre1
Pureftpd Pure Ftpd	Version 0.99pre2
Pureftpd Pure Ftpd	Version 1.0.0
Pureftpd Pure Ftpd	Version 1.0.10
Pureftpd Pure Ftpd	Version 1.0.11
Pureftpd Pure Ftpd	Version 1.0.12
Pureftpd Pure Ftpd	Version 1.0.13a
Pureftpd Pure Ftpd	Version 1.0.14
Pureftpd Pure Ftpd	Version 1.0.15
Pureftpd Pure Ftpd	Version 1.0.16a
Pureftpd Pure Ftpd	Version 1.0.16b
Pureftpd Pure Ftpd	Version 1.0.16c
Pureftpd Pure Ftpd	Version 1.0.17
Pureftpd Pure Ftpd	Version 1.0.17a
Pureftpd Pure Ftpd	Version 1.0.18
Pureftpd Pure Ftpd	Version 1.0.19
Pureftpd Pure Ftpd	Version 1.0.1
Pureftpd Pure Ftpd	Version 1.0.20
Pureftpd Pure Ftpd	Version 1.0.21
Pureftpd Pure Ftpd	Version 1.0.22
Pureftpd Pure Ftpd	Version 1.0.24
Pureftpd Pure Ftpd	Version 1.0.25
Pureftpd Pure Ftpd	Version 1.0.26
Pureftpd Pure Ftpd	Version 1.0.27
Pureftpd Pure Ftpd	Version 1.0.28
Pureftpd Pure Ftpd	Version 1.0.2
Pureftpd Pure Ftpd	Version 1.0.3
Pureftpd Pure Ftpd	Version 1.0.4
Pureftpd Pure Ftpd	Version 1.0.5
Pureftpd Pure Ftpd	Version 1.0.6
Pureftpd Pure Ftpd	Version 1.0.7
Pureftpd Pure Ftpd	Version 1.0.8
Pureftpd Pure Ftpd	Version 1.0.9