CVE

CVE-2024-48208

8.6

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

pure-ftpd

Updated Nov 10, 2026View on NVD →

S4E scanner

highNetwork Vulnerabilities~10 seconds

Pure-FTPd < 1.0.52 - Buffer Overflow

Pure-FTPd versions prior to 1.0.52 contain a buffer overflow vulnerability due to an out-of-bounds read in the domlsd() function within the ls.c file. This vulnerability could allow attackers to execute arbitrary code on affected systems. References: https://github.com/jedisct1/pure-ftpd/pull/176 https://github.com/rohilchaudhry/CVE-2024-48208

Used 18 times · 9 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: pure-ftpd

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →