Vulnerabilities > Proftpd Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-08-07 | CVE-2003-0500 | SQL-Injection vulnerability in Proftpd Project Proftpd 1.2.9Rc1 SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name. | 10.0 |
| 2001-12-31 | CVE-2001-1501 | Denial-Of-Service vulnerability in Proftpd Project Proftpd 1.2.1 The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument. | 5.0 |
| 2001-12-31 | CVE-2001-1500 | Unspecified vulnerability in Proftpd Project Proftpd ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. | 7.5 |
| 2001-06-02 | CVE-2001-0318 | Unspecified vulnerability in Proftpd Project Proftpd 1.2.0Rc2 Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd). | 7.5 |
| 2001-02-12 | CVE-2001-0027 | Unspecified vulnerability in Proftpd Project Proftpd mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users. | 7.5 |
| 1999-11-19 | CVE-1999-1475 | Unspecified vulnerability in Proftpd Project Proftpd 1.2 ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. | 4.6 |
| 1999-08-27 | CVE-1999-0911 | Remote Buffer Overflow in ProFTPD Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. | 10.0 |
| 1999-02-09 | CVE-1999-0368 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. network low complexity washington-university proftpd-project sco slackware redhat debian caldera critical | 10.0 |