Skip to content
OpenAdvisories

Package · Ubuntu

vsftpd

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.4
    CVE-2026-119568

    vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

    vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a tic…

    vsftpd vsftpd vsftpd vsftpd Debian Ubuntu
  • Low 3.1
    CVE-2026-119567

    vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases

    vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied commands by issuing RFC 775 X-prefixed aliases. The cmds_denied check in process_post_login() compares literal tokens, so attackers can …

    vsftpd vsftpd vsftpd vsftpd Debian Ubuntu
  • Unscored —
    CVE-2021-3618

    ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protoco…

    nginx nginx nginx sendmail Debian Ubuntu Alpine
  • Unscored —
    CVE-2015-1419

    Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown…

    vsftpd vsftpd Debian Ubuntu