Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
proftpd proftpd vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-3639
The mod_tls module in ProFTPD prior to 1.3.2b, and 1.3.3 prior to 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remo...
Proftpd Proftpd
Proftpd Proftpd 1.3.3
Proftpd Proftpd 1.3.2
Proftpd Proftpd 1.3.1
7.5
CVSSv3
CVE-2019-18217
ProFTPD prior to 1.3.6b and 1.3.7rc prior to 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.
Proftpd Proftpd 1.3.6
Proftpd Proftpd 1.3.7
Proftpd Proftpd
NA
CVE-1999-0911
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote malicious users to gain root access via a series of MKD and CWD commands that create nested directories.
Proftpd Project Proftpd 1.2 Pre3
Proftpd Project Proftpd 1.2 Pre4
Proftpd Project Proftpd 1.2 Pre5
Proftpd Project Proftpd 1.2 Pre1
Proftpd Project Proftpd 1.2 Pre2
2 EDB exploits
NA
CVE-2009-0542
SQL injection vulnerability in ProFTPD Server 1.3.1 up to and including 1.3.2rc2 allows remote malicious users to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable...
Proftpd Project Proftpd 1.3.1
Proftpd Project Proftpd 1.3.2 Rc2
Proftpd Project Proftpd 1.3.2
2 EDB exploits
5.5
CVSSv3
CVE-2017-7418
ProFTPD prior to 1.3.5e and 1.3.6 prior to 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local a...
Proftpd Proftpd 1.3.6
Proftpd Proftpd
7.8
CVSSv3
CVE-2004-0346
Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 up to and including 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.
Proftpd Proftpd 1.2.9
Proftpd Proftpd
NA
CVE-2010-4221
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD prior to 1.3.3c allow remote malicious users to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.
Proftpd Proftpd 1.3.2
Proftpd Proftpd 1.3.3
3 EDB exploits
2 Nmap scripts
4 Github repositories
NA
CVE-2013-4359
Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote malicious users to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation.
Proftpd Proftpd 1.3.5
Proftpd Proftpd 1.3.4
NA
CVE-2006-6563
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD prior to 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value.
Proftpd Project Proftpd 1.3.0
Proftpd Project Proftpd 1.3.0a
4 EDB exploits
7.5
CVSSv3
CVE-2019-19270
An issue exists in tls_verify_crl in ProFTPD up to and including 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow ...
Proftpd Proftpd 1.3.6
Proftpd Proftpd
Fedoraproject Fedora 30
Fedoraproject Fedora 31
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228
CVE-2024-20361
log injection
bypass
CVE-2024-4985
CVE-2024-35223
CVE-2024-29849
CVE-2024-31893
IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »