CVE-2001-0965
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/08/2001
Last modified:
05/09/2008
Description
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:glftpd:glftpd:1.13.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.16.9:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.17.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.18a:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.21:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.22b:*:*:*:*:*:*:* | ||
cpe:2.3:a:glftpd:glftpd:1.23:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page