vsftpd vulnerabilities (Debian)

8 vulnerabilities.

• vsftpd Debian vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking CVE-2026-119568 9.1 CriticalOctober 30, 2026
• vsftpd Debian vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases CVE-2026-119567 2.3 LowOctober 30, 2026
• vsftpd Debian ALPACA is an application layer protocol content confusion attack, exploiting TLS servers... CVE-2021-3618 Fix available 7.4 HighDecember 8, 2021
• vsftpd Debian Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access... CVE-2015-1419 Fix available 5.0 MediumJanuary 28, 2015
• vsftpd Debian net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high... CVE-2011-2189 Public exploitFix available EPSS 17.9% 7.5 HighOctober 10, 2011
• vsftpd Debian The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote... CVE-2011-0762 Public exploitFix available EPSS 73.9% 4.0 MediumMarch 2, 2011
• vsftpd Debian vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash)... CVE-2004-2259 Fix available 5.0 MediumDecember 31, 2004
• vsftpd Debian vsftpd 1.1.3 generates different error messages depending on whether or not a valid username... CVE-2004-0042 Fix available 5.0 MediumJanuary 14, 2004