Skip to content
Noroxi

ProFTPD Project records

19 published records for vendor proftpd project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 5.3%
Pre-auth RCE
7
With a fix record
52.6%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    19 records
    • CVE-2006-5815
      63This week

      Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause

      CriticalCVSS 10.0WeaponizedEPSS 75%

      proftpd project · proftpdNov 8, 2006

    • CVE-2003-0831
      53Plan

      ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote att

      CriticalCVSS 9.0Proof of conceptEPSS 56%

      proftpd project · proftpdNov 17, 2003

    • CVE-2009-0542
      52Plan

      SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (pe

      HighCVSS 7.5Proof of conceptEPSS 73%

      proftpd project · proftpdFeb 12, 2009

    • CVE-1999-0368
      52Plan

      Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.

      CriticalCVSS 10.0Proof of conceptEPSS 39%

      proftpd project · proftpdFeb 9, 1999

    • CVE-1999-0911
      51Plan

      Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that crea

      CriticalCVSS 10.0Proof of conceptEPSS 38%

      proftpd project · proftpdAug 27, 1999

    • CVE-2003-0500
      45Plan

      SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers t

      CriticalCVSS 10.0Proof of conceptEPSS 18%

      proftpd project · proftpdAug 7, 2003

    • CVE-2006-6170
      35Monitor

      Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ

      HighCVSS 7.5No exploitEPSS 18%

      proftpd project · proftpdNov 30, 2006

    • CVE-2005-4816
      34Monitor

      Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a

      HighCVSS 7.5No exploitEPSS 12%

      proftpd project · proftpdDec 31, 2005

    • CVE-2001-1500
      34Monitor

      ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a

      HighCVSS 7.5No exploitEPSS 12%

      proftpd project · proftpdDec 31, 2001

    • CVE-2001-0318
      33Monitor

      Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usin

      HighCVSS 7.5No exploitEPSS 11%

      proftpd project · proftpdJun 2, 2001

    • CVE-2006-6171
      33Monitor

      ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which

      HighCVSS 7.5No exploitEPSS 10%

      proftpd project · proftpdNov 30, 2006

    • CVE-2004-0432
      33Monitor

      ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to byp

      HighCVSS 7.5No exploitEPSS 9%

      proftpd project · proftpdAug 18, 2004

    • CVE-2001-1501
      32Monitor

      The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory co

      MediumCVSS 5.0Proof of conceptEPSS 38%

      proftpd project · proftpdDec 31, 2001

    • CVE-2001-0027
      32Monitor

      mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authentica

      HighCVSS 7.5No exploitEPSS 6%

      proftpd project · proftpdFeb 12, 2001

    • CVE-2008-4242
      29Monitor

      ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request

      MediumCVSS 6.8No exploitEPSS 7%

      proftpd project · proftpdSep 25, 2008

    • CVE-2005-2390
      28Monitor

      Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive informati

      MediumCVSS 6.4No exploitEPSS 9%

      proftpd project · proftpdJul 27, 2005

    • CVE-2006-6563
      27Monitor

      Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local

      MediumCVSS 6.6Proof of conceptEPSS 2%

      proftpd project · proftpdDec 15, 2006

    • CVE-2007-2165
      24Monitor

      The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module

      MediumCVSS 5.1No exploitEPSS 12%

      proftpd project · proftpdApr 22, 2007

    • CVE-1999-1475
      19Monitor

      ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords

      MediumCVSS 4.6No exploitEPSS 4%

      proftpd project · proftpdNov 19, 1999