[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBF2IfLVY_KjfsH9VNWWKkzURmRrWnINbSAwIvL5OS18":3,"g5a-risk:CVE-2021-40491":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":85,"cisaInfo":28,"otxData":28,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":127,"notableEvents":128},"CVE-2021-40491","What is CVE-2021-40491?","The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV\u002FLSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.","The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV\u002FLSPV responses to make sure they match the server address. This is si...","2021-09-03T02:15:06.403","2023-02-03T19:02:40.12",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":31,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":27,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.01031,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"gnu","inetutils","*","cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",2,[56,61,67,71],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=993476","Debian",[60],"Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgit.savannah.gnu.org\u002Fcgit\u002Finetutils.git\u002Fcommit\u002F?id=58cb043b190fd04effdaea7c9403416b436e50dd","Gnu",[65,66],"Patch","Vendor Advisory",{"url":68,"source":58,"tags":69},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F11\u002Fmsg00033.html",[70,60],"Mailing List",{"url":72,"source":63,"tags":73},"https:\u002F\u002Flists.gnu.org\u002Farchive\u002Fhtml\u002Fbug-inetutils\u002F2021-06\u002Fmsg00002.html",[70,66],4,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2021-40491? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-40491, a medium severity cyber security vulnerability from 2021. The ftp client in GNU Inetutils before 2.2 does not valid...","CVE-2021-40491, CVE-2021-40491 vulnerability, CVE-2021-40491 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, gnu security, debian security, inetutils vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-40491",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-40491","Cybersecurity","CVE-2021-40491, CVE-2021-40491 vulnerability, CVE-2021-40491 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113,121],{"Operator":28,"Negate":28,"Nodes":114},[115],{"Operator":116,"Negate":28,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":120,"VersionEndIncluding":28},"C525724E-40B9-4EA5-B25B-48EAF3950B53","2.2",{"Operator":28,"Negate":28,"Nodes":122},[123],{"Operator":116,"Negate":28,"CPEMatch":124},[125],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":126,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":130,"version":34},1792361964433,{"score":132,"band":133,"action":134,"scoredAt":135},23,"Low","Monitor","2026-10-16T06:51:58.602768+00:00"]