4 - CVE-2011-0762

Executive Summary

Informations
Name	CVE-2011-0762	First vendor Publication	2011-03-02
Vendor	Cve	Last vendor Modification	2021-03-04

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:N/I:N/A:P)
Cvss Base Score	4	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	8	Authentication	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0762

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-400	Uncontrolled Resource Consumption ('Resource Exhaustion')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13784

Oval ID:	oval:org.mitre.oval:def:13784
Title:	USN-1098-1 -- vsftpd vulnerability
Description:	It was discovered that vsftpd incorrectly handled certain glob expressions. A remote authenticated user could use a crafted glob expression to cause vftpd to consume all resources, leading to a denial of service.
Family:	unix	Class:	patch
Reference(s):	USN-1098-1 CVE-2011-0762	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06	Product(s):	vsftpd
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND vsftpd DPKG is earlier than 2.0.6-1ubuntu1.2 OR Release section Ubuntu 10.10 is installed AND Supported architectures section Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is powerpc AND vsftpd DPKG is earlier than 2.3.0~pre2-4ubuntu2.2 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is powerpc AND vsftpd DPKG is earlier than 2.2.2-3ubuntu6.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Installed architecture is lpia AND vsftpd DPKG is earlier than 2.2.0-1ubuntu2.1 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND vsftpd DPKG is earlier than 2.0.4-0ubuntu4.1

Definition Id: oval:org.mitre.oval:def:21856

Oval ID:	oval:org.mitre.oval:def:21856
Title:	RHSA-2011:0337: vsftpd security update (Important)
Description:	The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0337-01 CVE-2011-0762 CESA-2011:0337-CentOS 5	Version:	6
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	vsftpd
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND vsftpd is earlier than 0:2.0.5-16.el5_6.1 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section vsftpd is earlier than 0:2.2.2-6.el6_0.1 AND vsftpd-debuginfo is earlier than 0:2.2.2-6.el6_0.1

Definition Id: oval:org.mitre.oval:def:23346

Oval ID:	oval:org.mitre.oval:def:23346
Title:	ELSA-2011:0337: vsftpd security update (Important)
Description:	The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0337-01 CVE-2011-0762	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	vsftpd
Definition Synopsis:
vsftpd is earlier than 0:2.2.2-6.el6_0.1 AND Oracle Linux 6.x

CPE : Common Platform Enumeration

Type	Description	Count
Application	Vsftpd Project Vsftpd cpe:2.3:a:vsftpd_project:vsftpd::::::::	1
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	5
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	3
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:15:::::::* cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::*	3
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.2:::::::*	3
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	4

ExploitDB Exploits

id	Description
2011-03-02	vsftpd 2.3.2 Denial of Service Vulnerability

OpenVAS Exploits

Date	Description
2012-07-30	Name : CentOS Update for vsftpd CESA-2011:0337 centos5 x86_64 File : nvt/gb_CESA-2011_0337_vsftpd_centos5_x86_64.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-07 (vsftpd) File : nvt/glsa_201110_07.nasl
2011-10-16	Name : Debian Security Advisory DSA 2305-1 (vsftpd) File : nvt/deb_2305_1.nasl
2011-08-09	Name : CentOS Update for vsftpd CESA-2011:0337 centos5 i386 File : nvt/gb_CESA-2011_0337_vsftpd_centos5_i386.nasl
2011-04-01	Name : Ubuntu Update for vsftpd vulnerability USN-1098-1 File : nvt/gb_ubuntu_USN_1098_1.nasl
2011-03-24	Name : Fedora Update for vsftpd FEDORA-2011-2590 File : nvt/gb_fedora_2011_2590_vsftpd_fc14.nasl
2011-03-24	Name : Fedora Update for vsftpd FEDORA-2011-2615 File : nvt/gb_fedora_2011_2615_vsftpd_fc13.nasl
2011-03-24	Name : Mandriva Update for vsftpd MDVSA-2011:049 (vsftpd) File : nvt/gb_mandriva_MDVSA_2011_049.nasl
2011-03-15	Name : CentOS Update for vsftpd CESA-2011:0337 centos4 i386 File : nvt/gb_CESA-2011_0337_vsftpd_centos4_i386.nasl
2011-03-15	Name : RedHat Update for vsftpd RHSA-2011:0337-01 File : nvt/gb_RHSA-2011_0337-01_vsftpd.nasl
2011-03-03	Name : vsftpd FTP Server 'ls.c' Remote Denial of Service Vulnerability File : nvt/gb_vsftpd_46617.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
73340	vsftpd ls.c vsf_filename_passes_filter STAT Command glob Expression Remote DoS

Snort® IPS/IDS

Date	Description
2014-01-10	STAT overflow attempt RuleID : 1379-community - Revision : 23 - Type : PROTOCOL-FTP
2014-01-10	STAT overflow attempt RuleID : 1379 - Revision : 23 - Type : PROTOCOL-FTP

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_vsftpd-110308.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_vsftpd-110308.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2011-0337.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20110309_vsftpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_vsftpd-7408.nasl - Type : ACT_GATHER_INFO
2011-10-12	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-07.nasl - Type : ACT_GATHER_INFO
2011-09-20	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2305.nasl - Type : ACT_GATHER_INFO
2011-05-06	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12690.nasl - Type : ACT_GATHER_INFO
2011-05-06	Name : The remote openSUSE host is missing a security update. File : suse_11_2_vsftpd-110308.nasl - Type : ACT_GATHER_INFO
2011-05-06	Name : The remote SuSE 11 host is missing a security update. File : suse_11_vsftpd-110308.nasl - Type : ACT_GATHER_INFO
2011-05-06	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_vsftpd-7373.nasl - Type : ACT_GATHER_INFO
2011-03-30	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1098-1.nasl - Type : ACT_GATHER_INFO
2011-03-22	Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2011-049.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote FTP server is prone to a denial of service attack. File : vsftpd_2_3_3.nasl - Type : ACT_GATHER_INFO
2011-03-16	Name : The remote Fedora host is missing a security update. File : fedora_2011-2567.nasl - Type : ACT_GATHER_INFO
2011-03-15	Name : The remote Fedora host is missing a security update. File : fedora_2011-2615.nasl - Type : ACT_GATHER_INFO
2011-03-15	Name : The remote Fedora host is missing a security update. File : fedora_2011-2590.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2011-0337.nasl - Type : ACT_GATHER_INFO
2011-03-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0337.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/46617
BUGTRAQ	http://www.securityfocus.com/archive/1/516748/100/0/threaded
CERT-VN	http://www.kb.cert.org/vuls/id/590604
CONFIRM	ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changelog http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741
DEBIAN	http://www.debian.org/security/2011/dsa-2305
EXPLOIT-DB	http://www.exploit-db.com/exploits/16270
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.html
HP	http://marc.info/?l=bugtraq&m=133226187115472&w=2
JVN	http://jvn.jp/en/jp/JVN37417423/index.html
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2011:049
MISC	http://cxib.net/stuff/vspoc232.c
REDHAT	http://www.redhat.com/support/errata/RHSA-2011-0337.html
SECTRACK	http://www.securitytracker.com/id?1025186
SREASON	http://securityreason.com/securityalert/8109
SREASONRES	http://securityreason.com/achievement_securityalert/95
SUSE	http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
UBUNTU	http://www.ubuntu.com/usn/USN-1098-1
VUPEN	http://www.vupen.com/english/advisories/2011/0547 http://www.vupen.com/english/advisories/2011/0639 http://www.vupen.com/english/advisories/2011/0668 http://www.vupen.com/english/advisories/2011/0713
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/65873

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:17:29	Multiple Updates
2021-04-22 01:20:49	Multiple Updates
2021-03-26 12:07:42	Multiple Updates
2021-02-19 09:22:45	Multiple Updates
2020-05-23 01:43:54	Multiple Updates
2020-05-23 00:27:49	Multiple Updates
2018-10-10 00:19:41	Multiple Updates
2017-08-17 09:23:19	Multiple Updates
2016-04-26 20:33:24	Multiple Updates
2014-06-14 13:30:21	Multiple Updates
2014-02-21 13:21:38	Multiple Updates
2014-02-17 11:00:33	Multiple Updates
2014-01-19 21:27:36	Multiple Updates
2013-05-10 22:54:51	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	3
CPE ID(s)	19
Sources(s)	25
osvdb(s)	1
ExploitDB Exploit(s)	1
Openvas Exploit(s)	11
Snort® Rule(s)	2
Nessus® Exploit(s)	19

	Related
7.8	MDVSA-2011:049
7.8	DSA-2305
7.5	HPSBMU02752 SSR...
4	USN-1098-1
4	RHSA-2011:0337
4	GLSA-201110-07
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)