Every CVESearch/Get API key

CVE-2011-1409

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610,...

5.0 MediumFix available

CVE-2011-1409 is a medium vulnerability (CVSS 5.0) in Ulli Horlacher Fex, published June 12, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.29%, the 83rd percentile. Fixed in fex 20110610-1.

Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.29%EPSS, 83rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
20110610-1fex +2 more

Description

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Exploit likelihood

2.29%Up 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fex
Debian:12
before 20110610-1, plus listed versions
20110601-120110608-120110608-2
20110610-1
fex
Debian:13
before 20110610-1, plus listed versions
20110601-120110608-120110608-2
20110610-1
fex
Debian:6.0
before 20100208+debian1-1+squeeze1
20100208+debian1-1+squeeze1

What each source reports

NVD Score used5.0

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
CVE-2011-1409
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-287
Updated
2026-11-02
CVE ListNo score

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
CVE-2011-1409
Updated
2026-11-02
EUVDEUVD-2011-1416No score

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
EUVD-2011-1416
Updated
2026-11-03
GitHub AdvisoriesGHSA-5p42-9ww9-5p77No score

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610,...

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
GHSA-5p42-9ww9-5p77
Weakness
CWE-287
Updated
2026-11-02
OSVNo score

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
CVE-2011-1409
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1409No score

Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.

Record
DEBIAN-CVE-2011-1409
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open