Unrated severityNVD Advisory· Published Feb 12, 2009· Updated Jun 16, 2026

CVE-2009-0543

Description

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Proftpd/Proftpd2 versions
cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.3.1
osv-coords
pkg:rpm/opensuse/proftpd&distro=openSUSE%20Tumbleweed
Range: < 1.3.5b-2.5

Patches

Vulnerability mechanics

References

bugs.proftpd.org/show_bug.cginvd
secunia.com/advisories/34268nvd
security.gentoo.org/glsa/glsa-200903-27.xmlnvd
www.debian.org/security/2009/dsa-1730nvd
www.mandriva.com/security/advisoriesnvd
www.openwall.com/lists/oss-security/2009/02/11/4nvd
www.openwall.com/lists/oss-security/2009/02/11/5nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.012
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000