PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
high·Network Vulnerabilities·Updated Oct 7, 2025

Pure-FTPd < 1.0.52 - Buffer Overflow

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, subdomain, ipv4
CostFree
3.1k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2024-48208
8.6
CVSShigh
Exploitable remotely over the internet · no authentication required.

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
n/aby n/a
n/a
pure-ftpdby pureftpd
AFFECTED< 1.0.52→SAFE ✓≥ 1.0.52
Updated Sep 9, 2026View on NVD →
Similar Tools
high
Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload
→high
Guralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)
→critical
Apache RocketMQ - Remote Command Execution
→medium
SMB - Default Logins
→medium
FortiOS - Insecure LDAP Configuration Detection
→medium
Widget4Call WordPress - Cross-Site Scripting
→medium
OWL Carousel Slider - Cross-Site Scripting
→medium
FortiOS - Insecure LDAP Configuration Detection
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Pure-FTPd < 1.0.52 - Buffer Overflow CVE-2024-48208 Scanner | S4E