Unscored severity · published Jun 2, 2001
CVE-2001-0318
Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd)
–
CVSS
11.1%
EPSS
No
On KEV
Description
Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd).
Exploitation
Is it being used?
Exploit prediction (EPSS)11.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Proftpd · Proftpd Project
1.2.0_rc2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0318
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0318
Patch
http://archives.neohapsis.com/archives/bugtraq/2001-02/0117.html
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380
marc.info
http://marc.info/?l=bugtraq&m=97916525715657&w=2
Patch
http://www.debian.org/security/2001/dsa-029
Patch
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6433
More from Proftpd
8.1
CVE-2026-35025
ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR
6.5
CVE-2026-53994
ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation
–
CVE-2009-0542
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which…
–
CVE-2008-4242
ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute…
–
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same…