Advisories · Technology
ProFTPD.
Every CVE that names ProFTPD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass
- ProFTPD
- Path traversal
- CVSS 5.3 Medium
ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass
- ProFTPD
- Broken access control
- CVSS 6.3 Medium
ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap
- ProFTPD
- Memory corruption
- CVSS 7.1 High
ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser
- proftpd
- Memory corruption
- CWE-126
- CVSS 8.7 High
ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly
- proftpd
- Memory corruption
- CVSS 7.7 High
ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation
- ProFTPD
- Memory corruption
- CVSS 8.6 High
ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR
- ProFTPD
- Path traversal
- CVSS 8.1 High
SQL injection in ProFTPD
- ProFTPD
- SQL injection
- CVSS 8.1 High
SQL injection in ProFTPD
- ProFTPD
- SQL injection
- CVSS 8.7 High
ProFTPD 1.3.7a - Remote Denial of Service
- ProFTPD
- Denial of service