CVE-2011-0762
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and...
- Published
- Mar 2, 2011
- Updated
- Aug 6, 2024
- Assigning CNA
- certcc
- Evidence observed
- Mar 2, 2011
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:S/C:N/I:N/A:PHigh · next 30 days
- Percentile
- 99.5%
- Model date
- Oct 11, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Sources
modules/auxiliary/dos/ftp/vsftpd_232.rb
Metasploit Framework modulesDeclared conditions
- verification: check_declared($.auxiliary_dos/ftp/vsftpd_232.check)
- vsftpd < 2.3.3 - DoSTemplate
network/cves/2011/CVE-2011-0762.yaml
Nuclei TemplatesDeclared conditions
- network: tcp($.protocol_keys)
- verification: dsl($.matchers[*].type)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.