Pure-FTPd 1.0.24 - Security Vulnerability

mediumseverity

7.1%likelihood of exploitation, next 30 days

94%of all CVEs are less likely

Readycheck to confirm it

Pure-FTPd 1.0.24 contains security vulnerabilities that could allow attackers to exploit the FTP server. This version is known to have various security issues that could lead to unauthorized access or other security implications.

Impact

Attackers can exploit various security vulnerabilities in Pure-FTPd 1.0.24 to potentially gain unauthorized access to the FTP server or compromise its security.

Fix

Upgrade to Pure-FTPd version 1.0.25 or later to address the security vulnerabilities present in version 1.0.24.

How to confirm it

Send: tcp probe to {{Hostname}}
Positive when: contains(raw, 'Pure-FTPd') and contains(version, '1.0.24')

Run it with nuclei: nuclei -id CVE-2020-9365 -u <target>

The full check

id: CVE-2020-9365

info:
  name: Pure-FTPd 1.0.24 - Security Vulnerability
  author: pussycat0x
  severity: medium
  description: |
    Pure-FTPd 1.0.24 contains security vulnerabilities that could allow attackers to exploit the FTP server. This version is known to have various security issues that could lead to unauthorized access or other security implications.
  impact: |
    Attackers can exploit various security vulnerabilities in Pure-FTPd 1.0.24 to potentially gain unauthorized access to the FTP server or compromise its security.
  remediation: |
    Upgrade to Pure-FTPd version 1.0.25 or later to address the security vulnerabilities present in version 1.0.24.
  metadata:
    verified: true
    shodan-query: product:"Pure-FTPd" version:"1.0.24"
    max-request: 1
  tags: cve,cve2020,network,ftp,pure-ftpd,tcp,passive,vuln

tcp:
  - inputs:
      - data: 00000000
        type: hex

    host:
      - "{{Hostname}}"
    port: 21
    read-size: 1024

    matchers:
      - type: dsl
        dsl:
          - "contains(raw, 'Pure-FTPd')"
          - "contains(version, '1.0.24')"
        condition: and

    extractors:
      - type: regex
        group: 1
        name: version
        regex:
          - "Pure-FTPd ([0-9.]+)"

Use this check only on systems you are authorised to test. Where the data comes from