high·Network Vulnerabilities·Updated Oct 7, 2025

Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload

Est. Time~10 seconds

Scan TypeSingle Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2021-40524

7.5

CVSS

Description

In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. (Versions 1.0.23 through 1.0.49 are affected.)

Attack Vector

Privileges Req.

User Interaction

Affected

n/aby n/a

n/a

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload

Check your infrastructure.Right now.

Check your infrastructure.
Right now.