CVE-2024-48208

Name of the Vulnerable Software and Affected Versions Pure-FTPd versions prior to 1.0.52

Description The issue is related to the domlsd() function in the ls.c file of the Pure-FTPd FTP server, which is associated with an out of bounds read in memory. This can be exploited by a remote attacker to disrupt the user's connection to the server.

Recommendations For versions prior to 1.0.52, update to version 1.0.52 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable domlsd() function until a patch is available.