CVE-2011-1575: Command Injection
Pure-FTPd has released version 1.0.30 which fixes a STARTTLS flaw similar to Postfix's CVE-2011-0411 [1]. Upgrading is recommended.
References:
[1] http://www.pureftpd.org/project/pure-ftpd/news
Other sources
The STARTTLS implementation in ftpparser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1575?
CVE-2011-1575 is classified as a medium severity vulnerability due to its potential impact on secure FTP communications.
How do I fix CVE-2011-1575?
To fix CVE-2011-1575, upgrade to Pure-FTPd version 1.0.30 or later as it addresses the vulnerability.
What versions are affected by CVE-2011-1575?
CVE-2011-1575 affects Pure-FTPd versions up to 1.0.29 and several earlier versions.
What kind of vulnerability is CVE-2011-1575?
CVE-2011-1575 is a STARTTLS flaw in Pure-FTPd that could allow attackers to compromise secure FTP sessions.
Are there any workarounds for CVE-2011-1575?
There are no effective workarounds for CVE-2011-1575, so upgrading to the fixed version is the recommended action.