Unscored severity · published Aug 18, 2004
CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions
–
CVSS
9.2%
EPSS
No
On KEV
Description
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
0.5; 0.7; 1.1a; 1.2; 1.4; 1.4; +2 more · source: NVD
PR
Proftpd · Proftpd Project
1.2.9 · source: NVD
SL
Secure Linux · Trustix
2.0; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0432
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0432
bugs.proftpd.org
http://bugs.proftpd.org/show_bug.cgi?id=2267
marc.info
http://marc.info/?l=bugtraq&m=108335030208523&w=2
marc.info
http://marc.info/?l=bugtraq&m=108335051011341&w=2
secunia.com
http://secunia.com/advisories/11527
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2004:041
Patch
http://www.securityfocus.com/bid/10252
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync