rpm package
opensuse/proftpd&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/proftpd&distro=openSUSE%20Tumbleweed
Vulnerabilities (19)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-57392 | Hig | 7.5 | < 1.3.8c-2.1 | 1.3.8c-2.1 | Feb 6, 2025 | Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port. | |
| CVE-2024-48651 | Hig | 7.5 | < 1.3.8c-1.1 | 1.3.8c-1.1 | Nov 29, 2024 | In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql. | |
| CVE-2023-51713 | — | < 1.3.8b-2.1 | 1.3.8b-2.1 | Dec 22, 2023 | make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics. | ||
| CVE-2023-48795 | Med | 5.9 | < 1.3.8b-1.1 | 1.3.8b-1.1 | Dec 18, 2023 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end | |
| CVE-2020-9273 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Feb 20, 2020 | In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution. | ||
| CVE-2020-9272 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Feb 20, 2020 | ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function. | ||
| CVE-2019-19269 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Nov 26, 2019 | An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when | ||
| CVE-2019-18217 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Oct 21, 2019 | ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop. | ||
| CVE-2019-12815 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Jul 19, 2019 | An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. | ||
| CVE-2017-7418 | Med | 5.5 | < 1.3.6e-1.10 | 1.3.6e-1.10 | Apr 4, 2017 | ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local acces | |
| CVE-2016-3125 | Hig | 7.5 | < 1.3.5b-2.5 | 1.3.5b-2.5 | Apr 5, 2016 | The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors | |
| CVE-2015-3306 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | May 18, 2015 | The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. | ||
| CVE-2013-4359 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Sep 30, 2013 | Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation. | ||
| CVE-2011-4130 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Dec 6, 2011 | Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer. | ||
| CVE-2011-1137 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Mar 11, 2011 | Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message. | ||
| CVE-2009-3639 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Oct 28, 2009 | The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers t | ||
| CVE-2009-0543 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Feb 12, 2009 | ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres. | ||
| CVE-2009-0542 | — | < 1.3.5b-2.5 | 1.3.5b-2.5 | Feb 12, 2009 | SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql. | ||
| CVE-2006-5815 | — | < 1.3.6e-1.10 | 1.3.6e-1.10 | Nov 8, 2006 | Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit." |
- affected < 1.3.8c-2.1fixed 1.3.8c-2.1
Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port.
- affected < 1.3.8c-1.1fixed 1.3.8c-1.1
In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql.
- CVE-2023-51713Dec 22, 2023affected < 1.3.8b-2.1fixed 1.3.8b-2.1
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
- affected < 1.3.8b-1.1fixed 1.3.8b-1.1
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end
- CVE-2020-9273Feb 20, 2020affected < 1.3.6e-1.10fixed 1.3.6e-1.10
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
- CVE-2020-9272Feb 20, 2020affected < 1.3.6e-1.10fixed 1.3.6e-1.10
ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.
- CVE-2019-19269Nov 26, 2019affected < 1.3.6e-1.10fixed 1.3.6e-1.10
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when
- CVE-2019-18217Oct 21, 2019affected < 1.3.6e-1.10fixed 1.3.6e-1.10
ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.
- CVE-2019-12815Jul 19, 2019affected < 1.3.6e-1.10fixed 1.3.6e-1.10
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
- affected < 1.3.6e-1.10fixed 1.3.6e-1.10
ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local acces
- affected < 1.3.5b-2.5fixed 1.3.5b-2.5
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors
- CVE-2015-3306May 18, 2015affected < 1.3.5b-2.5fixed 1.3.5b-2.5
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
- CVE-2013-4359Sep 30, 2013affected < 1.3.5b-2.5fixed 1.3.5b-2.5
Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation.
- CVE-2011-4130Dec 6, 2011affected < 1.3.5b-2.5fixed 1.3.5b-2.5
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
- CVE-2011-1137Mar 11, 2011affected < 1.3.5b-2.5fixed 1.3.5b-2.5
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
- CVE-2009-3639Oct 28, 2009affected < 1.3.5b-2.5fixed 1.3.5b-2.5
The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers t
- CVE-2009-0543Feb 12, 2009affected < 1.3.5b-2.5fixed 1.3.5b-2.5
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
- CVE-2009-0542Feb 12, 2009affected < 1.3.5b-2.5fixed 1.3.5b-2.5
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql.
- CVE-2006-5815Nov 8, 2006affected < 1.3.6e-1.10fixed 1.3.6e-1.10
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."