CVE-2011-0762

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

• CWE-400

• ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/ChangelogBroken Link
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741Issue Tracking, Third Party Advisory
• http://cxib.net/stuff/vspoc232.cBroken Link
• http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=133226187115472&w=2Issue Tracking, Third Party Advisory
• http://securityreason.com/achievement_securityalert/95Exploit, Third Party Advisory
• http://securityreason.com/securityalert/8109Exploit, Third Party Advisory
• http://www.debian.org/security/2011/dsa-2305Third Party Advisory
• http://www.exploit-db.com/exploits/16270Exploit, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/590604Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:049Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0337.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/516748/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/46617Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025186Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1098-1Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0547Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0639Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0668Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0713Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65873Third Party Advisory, VDB Entry
• ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/ChangelogBroken Link
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741Issue Tracking, Third Party Advisory
• http://cxib.net/stuff/vspoc232.cBroken Link
• http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=133226187115472&w=2Issue Tracking, Third Party Advisory
• http://securityreason.com/achievement_securityalert/95Exploit, Third Party Advisory
• http://securityreason.com/securityalert/8109Exploit, Third Party Advisory
• http://www.debian.org/security/2011/dsa-2305Third Party Advisory
• http://www.exploit-db.com/exploits/16270Exploit, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/590604Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:049Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0337.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/516748/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/46617Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025186Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1098-1Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0547Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0639Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0668Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0713Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65873Third Party Advisory, VDB Entry

Published

Mar 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0756The application server in Trustwave WebDefend Enterprise bef…
• CVE-2011-0757IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2…
• CVE-2011-0758The eCS component (ECSQdmn.exe) in CA ETrust Secure Content …
• CVE-2011-0759Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2011-0760Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2011-0761Perl 5.10.x allows context-dependent attackers to cause a de…
• CVE-2011-0764t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teT…
• CVE-2011-0765Unspecified vulnerability in lft in pWhois Layer Four Tracer…
• CVE-2011-0766The random number generator in the Crypto application before…
• CVE-2011-0767Cross-site scripting (XSS) vulnerability in the management G…
• CVE-2011-0770Cross-site scripting (XSS) vulnerability in Windows Event Lo…
• CVE-2011-0771The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal …