Unscored severity · published Feb 12, 2009
CVE-2009-0543
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not…
–
CVSS
15.8%
EPSS
No
On KEV
Description
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Proftpd · Proftpd
1.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0543
bugs.proftpd.org
http://bugs.proftpd.org/show_bug.cgi?id=3173
secunia.com
http://secunia.com/advisories/34268
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200903-27.xml
www.debian.org
http://www.debian.org/security/2009/dsa-1730
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:061
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/02/11/4
More from Proftpd
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2010-20103
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010
9.8
CVE-2019-12815
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to…
8.8
CVE-2026-63090
ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly
8.8
CVE-2020-9273
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel