Known Vulnerabilities for products from Proftpd Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Proftpd Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2009-0542 | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL command... | 7.5 - HIGH | 2009-02-12 | 2018-10-11 |
| CVE-2008-4242 | ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cros... | 6.8 - MEDIUM | 2008-09-25 | 2017-08-08 |
| CVE-2007-2165 | The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require t... | 5.1 - MEDIUM | 2007-04-22 | 2017-07-29 |
| CVE-2006-6563 | Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1r... | 6.6 - MEDIUM | 2006-12-15 | 2018-10-17 |
| CVE-2006-6171 | ** DISPUTED ** ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in... | 7.5 - HIGH | 2006-11-30 | 2023-11-07 |
| CVE-2006-6170 | Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possi... | 7.5 - HIGH | 2006-11-30 | 2018-10-17 |
| CVE-2006-5815 | Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authentic... | 10 - HIGH | 2006-11-08 | 2018-10-17 |
| CVE-2005-4816 | Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and pos... | 7.5 - HIGH | 2005-12-31 | 2008-09-05 |
| CVE-2005-2390 | Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sens... | 6.4 - MEDIUM | 2005-07-27 | 2016-10-18 |
| CVE-2004-1602 | ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows ... | 5 - MEDIUM | 2004-10-15 | 2017-07-11 |
| CVE-2004-0432 | ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP... | 7.5 - HIGH | 2004-08-18 | 2017-07-11 |
| CVE-2004-0346 | Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges v... | 7.8 - HIGH | 2004-11-23 | 2024-02-02 |
| CVE-2003-0831 | ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which al... | 9 - HIGH | 2003-11-17 | 2017-10-05 |
| CVE-2003-0500 | SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows rem... | 10 - HIGH | 2003-08-07 | 2008-09-05 |
| CVE-2001-1501 | The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CP... | 5 - MEDIUM | 2001-12-31 | 2008-09-10 |
| CVE-2001-1500 | ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward reso... | 7.5 - HIGH | 2001-12-31 | 2017-12-19 |
| CVE-2001-0318 | Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP se... | 7.5 - HIGH | 2001-06-02 | 2017-10-10 |
| CVE-2001-0027 | mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which al... | 7.5 - HIGH | 2001-02-12 | 2017-12-19 |
| CVE-1999-1475 | ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtai... | 4.6 - MEDIUM | 1999-11-19 | 2008-09-05 |
| CVE-1999-0911 | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD com... | 10 - HIGH | 1999-08-27 | 2008-09-09 |