Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-1575 PoC — Pure-FTPd ftp_parser.c STARTTLS实现明文命令注入漏洞

Source
https://github.com/masamoon/cve-2011-1575-poc
Associated Vulnerability
Title:Pure-FTPd ftp_parser.c STARTTLS实现明文命令注入漏洞 (CVE-2011-1575)
Description:The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Description
Very simple script to test for cve 2011-1575
File Snapshot

 [4.0K]  /data/pocs/509027658d8e8f5eafa7dcc9e63fd3d447920a48
└── [  62]  cve-2011-1575.sh

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →