Known Vulnerabilities for products from Proftpd Project

Listed below are 19 of the newest known vulnerabilities associated with the vendor "Proftpd Project".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2009-0542 json SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL command... Not Provided 2009-02-12 2026-04-23
CVE-2008-4242 json ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cros... Not Provided 2008-09-25 2026-04-23
CVE-2007-2165 json The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require t... Not Provided 2007-04-22 2026-04-23
CVE-2006-6563 json Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1r... Not Provided 2006-12-15 2026-04-23
CVE-2006-6171 json ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configurati... Not Provided 2006-11-30 2026-04-23
CVE-2006-6170 json Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possi... Not Provided 2006-11-30 2026-04-23
CVE-2006-5815 json Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authentic... Not Provided 2006-11-08 2026-04-23
CVE-2005-4816 json Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and pos... Not Provided 2005-12-31 2025-04-03
CVE-2005-2390 json Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sens... Not Provided 2005-07-27 2025-04-03
CVE-2004-0432 json ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP... Not Provided 2004-08-18 2025-04-03
CVE-2003-0831 json ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which al... Not Provided 2003-11-17 2025-04-03
CVE-2003-0500 json SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows rem... Not Provided 2003-08-07 2025-04-03
CVE-2001-1501 json The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CP... Not Provided 2001-12-31 2025-04-03
CVE-2001-1500 json ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward reso... Not Provided 2001-12-31 2025-04-03
CVE-2001-0318 json Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP se... Not Provided 2001-06-02 2025-04-03
CVE-2001-0027 json mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which al... Not Provided 2001-02-12 2025-04-03
CVE-1999-1475 json ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtai... Not Provided 1999-11-19 2025-04-03
CVE-1999-0911 json Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD com... Not Provided 1999-08-27 2025-04-03
CVE-1999-0368 json Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. Not Provided 1999-02-09 2025-04-03
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report