proftpd project proftpd 1.2.8 rc1 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in mod_radius in ProFTPD prior to 1.3.0rc2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long password.

Multiple format string vulnerabilities in ProFTPD prior to 1.3.0rc2 allow malicious users to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

ProFTPD 1.2.7 up to and including 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote malicious users to execute arbitrary code via a buffer overflow using certain files.

Proftpd Project Proftpd 1.2.7 Rc3 Proftpd Project Proftpd 1.2.7 Rc2 Proftpd Project Proftpd 1.2.9 Rc2 Proftpd Project Proftpd 1.2.7 Proftpd Project Proftpd 1.2.8 Rc1 Proftpd Project Proftpd 1.2.9 Rc1 Proftpd Project Proftpd 1.2.7 Rc1 Proftpd Project Proftpd 1.2.8 Proftpd Project Proftpd 1.2.8 Rc2

3 EDB exploits

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD prior to 1.2.9rc1 allows remote malicious users to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.

Proftpd Project Proftpd 1.2.9 Rc1

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook