proftpd proftpd vulnerabilities and exploits

(subscribe to this query)

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and previous versions allows remote malicious users to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.

Proftpd Proftpd Proftpd Proftpd 1.2.0 Proftpd Proftpd 1.2.1 Proftpd Proftpd 1.2.2 Proftpd Proftpd 1.2.3 Proftpd Proftpd 1.2.4 Proftpd Proftpd 1.2.5 Proftpd Proftpd 1.2.6 Proftpd Proftpd 1.2.7 Proftpd Proftpd 1.2.8 Proftpd Proftpd 1.2.9 Proftpd Proftpd 1.2.10

1 EDB exploit

Use-after-free vulnerability in the Response API in ProFTPD prior to 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.

Proftpd Proftpd Proftpd Proftpd 1.2.0 Proftpd Proftpd 1.2.1 Proftpd Proftpd 1.2.2 Proftpd Proftpd 1.2.3 Proftpd Proftpd 1.2.4 Proftpd Proftpd 1.2.5 Proftpd Proftpd 1.2.6 Proftpd Proftpd 1.2.7 Proftpd Proftpd 1.2.8 Proftpd Proftpd 1.2.9 Proftpd Proftpd 1.2.10

1 Github repository1 Article

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD prior to 1.3.3d, when mod_sql is enabled, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitut...

Proftpd Proftpd Proftpd Proftpd 1.2.0 Proftpd Proftpd 1.2.1 Proftpd Proftpd 1.2.2 Proftpd Proftpd 1.2.3 Proftpd Proftpd 1.2.4 Proftpd Proftpd 1.2.5 Proftpd Proftpd 1.2.6 Proftpd Proftpd 1.2.7 Proftpd Proftpd 1.2.8 Proftpd Proftpd 1.2.9 Proftpd Proftpd 1.2.10

ProFTPD prior to 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.

Proftpd Proftpd Proftpd Proftpd 1.2.0 Proftpd Proftpd 1.2.1 Proftpd Proftpd 1.2.2 Proftpd Proftpd 1.2.3 Proftpd Proftpd 1.2.4 Proftpd Proftpd 1.2.5 Proftpd Proftpd 1.2.6 Proftpd Proftpd 1.2.7 Proftpd Proftpd 1.2.8 Proftpd Proftpd 1.2.9 Proftpd Proftpd 1.2.10

The pr_data_xfer function in ProFTPD prior to 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.

Proftpd Proftpd Proftpd Proftpd 1.2.0 Proftpd Proftpd 1.2.1 Proftpd Proftpd 1.2.2 Proftpd Proftpd 1.2.3 Proftpd Proftpd 1.2.4 Proftpd Proftpd 1.2.5 Proftpd Proftpd 1.2.6 Proftpd Proftpd 1.2.7 Proftpd Proftpd 1.2.8 Proftpd Proftpd 1.2.9 Proftpd Proftpd 1.2.10

Buffer overflow in mod_radius in ProFTPD prior to 1.3.0rc2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long password.

Proftpd Project Proftpd 1.2 Proftpd Project Proftpd 1.2.0 Rc1 Proftpd Project Proftpd 1.2.0 Rc2 Proftpd Project Proftpd 1.2.0 Rc3 Proftpd Project Proftpd 1.2.1 Proftpd Project Proftpd 1.2.2 Proftpd Project Proftpd 1.2.2 Rc1 Proftpd Project Proftpd 1.2.2 Rc3 Proftpd Project Proftpd 1.2.3 Proftpd Project Proftpd 1.2.4 Proftpd Project Proftpd 1.2.5 Proftpd Project Proftpd 1.2.5 Rc1

Multiple format string vulnerabilities in ProFTPD prior to 1.3.0rc2 allow malicious users to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

Proftpd Project Proftpd 1.2.0 Pre9 Proftpd Project Proftpd 1.2.0 Pre10 Proftpd Project Proftpd 1.2.0 Rc1 Proftpd Project Proftpd 1.2.0 Rc2 Proftpd Project Proftpd 1.2.0 Rc3 Proftpd Project Proftpd 1.2.1 Proftpd Project Proftpd 1.2.1 Final Proftpd Project Proftpd 1.2.2 Proftpd Project Proftpd 1.2.2 Rc1 Proftpd Project Proftpd 1.2.2 Rc2 Proftpd Project Proftpd 1.2.2 Rc3 Proftpd Project Proftpd 1.2.3

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD prior to 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) S...

Proftpd Proftpd 1.2.10 Proftpd Proftpd 1.3.0 Proftpd Proftpd 1.3.1 Proftpd Proftpd 1.3.2 Proftpd Proftpd 1.3.3

1 Article

ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote malicious users to bypass ACLs or cause an incorrect client hostname to be logged.

Proftpd Project Proftpd 1.2 Proftpd Project Proftpd 1.2.0 Rc3 Proftpd Project Proftpd 1.2.1 Proftpd Project Proftpd 1.2.2 Proftpd Project Proftpd 1.2.2 Rc1 Proftpd Project Proftpd 1.2.2 Rc2 Proftpd Project Proftpd 1.2 Pre1 Proftpd Project Proftpd 1.2 Pre2 Proftpd Project Proftpd 1.2 Pre3 Proftpd Project Proftpd 1.2 Pre4 Proftpd Project Proftpd 1.2 Pre5 Proftpd Project Proftpd 1.2 Pre6

The mod_tls module in ProFTPD prior to 1.3.2b, and 1.3.3 prior to 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remo...

Proftpd Proftpd Proftpd Proftpd 1.3.1 Proftpd Proftpd 1.3.2 Proftpd Proftpd 1.3.3

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook