Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-119567

vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases

vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied commands by issuing RFC 775 X-prefixed aliases. The cmds_denied check in process_post_login() compares literal tokens, so attackers can send XRMD, XMKD, XCWD, XPWD, or XCUP to perform blocked operations like deleting directories.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Vsftpd Project
Products
Vsftpd
CVE-2026-119568

vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Vsftpd Project
Products
Vsftpd
CVE-2015-1419

vsftpd: access restrictions bypass

Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

CVSS 2.0 · 5.0 Medium EPSS 6.8% KEV · Not listed
Vendors
Opensuse Vsftpd Project
Products
Opensuse Vsftpd
CVE-2011-0762

vsftpd: remote DoS via crafted glob pattern

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

CVSS 2.0 · 4.0 Medium EPSS 73.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2021-3618

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

CVSS 3.1 · 7.4 High EPSS 2.0% KEV · Not listed
Vendors
Debian F5 Fedoraproject and 2 more
Products
Debian Linux Nginx Fedora and 2 more
CVE-2021-30047

vsftpd: denial of service due to limited number of connections allowed

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Vsftpd Project
Products
Vsftpd
CVE-2011-2523

vsftpd: backdoor which opens a shell on port 6200/tcp

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

CVSS 3.1 · 9.8 Critical EPSS 96.2% KEV · Not listed
Vendors
Debian Vsftpd Project
Products
Debian Linux Vsftpd