Description
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vsftpd | 2.3.4-1 | — |
| Debian 13 | vsftpd | 2.3.4-1 | — |
| Debian 12 | vsftpd | 2.3.4-1 | — |
| Debian 6.0 | vsftpd | 2.3.2-3+squeeze2 | DSA-2305-1 |
| Debian 5.0 | vsftpd | 2.0.7-1+lenny1 | DSA-2305-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | vsftpd | 2.2.2-6.el6_0.1 | RHSA-2011:0337 |
| RHEL 5 | vsftpd | 2.0.5-16.el5_6.1 | RHSA-2011:0337 |
| RHEL 4 | vsftpd | 2.0.1-9.el4 | RHSA-2011:0337 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
VSFTPD 2.3.2 and Earlier STAT Denial of Service
auxiliary/dos/ftp/vsftpd_232
Exploit-DB 1
- vsftpd 2.3.2 - Denial of Service EDB-16270 · dos · Mar 2, 2011 · verified
GitHub 1 repository
-
s3mPr1linux/CVE-2011-0762 ★ 0 · May 19, 2025
Um script automatizado melhorando o exploit do cve-2011-0762 postado no exploit-db
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- vsftpd < 2.3.3 - DoS network/cves/2011/CVE-2011-0762.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- RHSA-2011:0337 Red Hat Security Advisory: vsftpd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2305-1 vsftpd - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
References
- FEDORA-2011-2590 vendor-advisory
- HPSBMU02752 vendor-advisory
- SUSE-SR:2011:009 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741
- FEDORA-2011-2615 vendor-advisory
- ADV-2011-0639 vdb-entry
- ADV-2011-0668 vdb-entry
- DSA-2305 vendor-advisory
- 20110301 vsftpd 2.3.2 remote denial-of-service mailing-list
- 8109 third-party-advisory
- ADV-2011-0547 vdb-entry
- 16270 exploit
- vsftpd-vsffilenamepassesfilter-dos(65873) vdb-entry
- http://cxib.net/stuff/vspoc232.c
- MDVSA-2011:049 vendor-advisory
- ADV-2011-0713 vdb-entry
- FEDORA-2011-2567 vendor-advisory
- USN-1098-1 vendor-advisory
- VU#590604 third-party-advisory
- 1025186 vdb-entry
- 46617 vdb-entry
- 20110301 vsftpd 2.3.2 remote denial-of-service third-party-advisory
- RHSA-2011:0337 vendor-advisory
- JVN#37417423 third-party-advisory