CVE-2011-1575

The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

33.34% chance of exploitation in the next 30 days, 98th percentile

Published

2011-05-23

Updated

2024-08-06

Proof-of-concept exploits (1)

• masamoon/cve-2011-1575-poc0★ · 2017-10-17

References

• CVE Record
• NVD entry

Related

• CVE-2011-1574
• CVE-2011-1591
• CVE-2011-1571
• CVE-2011-1595
• CVE-2011-1570
• CVE-2011-1609