PR
Product
proftpd
On CISA KEVExploited in the wild
34
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 14Medium 5Low 0
Watch
Add proftpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3306 In wildKEV | 10.0 | May 18 | ProFTPD Improper Access Control Vulnerability Affected: 1.3.5 |
| CVE-2010-20103 | 9.8 | Aug 20 | A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010 Affected: 1.3.3 |
| CVE-2019-12815 | 9.8 | Jul 19 | An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to… Affected: through 1.3.5b |
| CVE-2026-63090 | 8.8 | Jul 20 | ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly Affected: before 1.3.9c; 1.3.10rc1 before 1.3.10rc3 |
| CVE-2020-9273 | 8.8 | Feb 20 | In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel Affected: 1.3.7 |
| CVE-2026-35025 | 8.1 | Jun 24 | ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR Affected: through 1.3.9b; 1.3.10; 1.3.10 |
| CVE-2026-44331 | 8.1 | May 5 | In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL… Affected: through 1.3.9a |
| CVE-2026-42167 | 8.1 | Apr 28 | mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as… Affected: 1.3.7b before 1.3.9a |
| CVE-2004-0346 | 7.8 | Nov 23 | Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command Affected: 1.2.7 before 1.2.9; 1.2.9; 1.2.9; 1.2.9 |
| CVE-2023-51713 | 7.5 | Dec 22 | make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics Affected: before 1.3.8a |
| CVE-2021-46854 | 7.5 | Nov 23 | mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters Affected: before 1.3.7c |
| CVE-2020-9272 | 7.5 | Feb 20 | ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function Affected: before 1.3.6c |
| CVE-2019-19272 | 7.5 | Nov 26 | An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6 Affected: before 1.3.6 |
| CVE-2019-19271 | 7.5 | Nov 26 | An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6 Affected: before 1.3.6 |
| CVE-2019-19270 | 7.5 | Nov 26 | An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b Affected: through 1.3.5; 1.3.6; 1.3.6; 1.3.6 |
| CVE-2019-18217 | 7.5 | Oct 21 | ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child… Affected: through 1.3.5; 1.3.6; 1.3.6; 1.3.6; 1.3.6; 1.3.6; +2 more |
| CVE-2016-3125 | 7.5 | Apr 5 | The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended… Affected: through 1.3.5; 1.3.6 |
| CVE-2026-63091 | 6.5 | Jul 20 | ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser Affected: before 1.3.9c; 1.3.10rc1 before 1.3.10rc3 |
| CVE-2026-53994 | 6.5 | Jul 18 | ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation Affected: before 1.3.10 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: through 1.3.8b |
| CVE-2017-7418 | 5.5 | Apr 4 | ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option,… Affected: through 1.3.5; 1.3.6; 1.3.6; 1.3.6; 1.3.6; 1.3.6 |
| CVE-2019-19269 | 4.9 | Nov 30 | An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b Affected: through 1.3.5e; 1.3.6; 1.3.6; 1.3.6; 1.3.6; 1.3.6; +2 more |
| CVE-2013-4359 | – | Sep 30 | Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value… Affected: 1.3.4; 1.3.5 |
| CVE-2012-6095 | – | Jan 24 | ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD… Affected: through 1.3.4; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2011-4130 | – | Dec 6 | Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs… Affected: through 1.3.3; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2011-1137 | – | Mar 11 | Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via… Affected: through 1.3.3; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2010-4652 | – | Feb 2 | Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of… Affected: through 1.3.3; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2008-7265 | – | Nov 9 | The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer Affected: through 1.3.2; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2010-4221 | – | Nov 9 | Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors… Affected: 1.3.2; 1.3.2; 1.3.2; 1.3.2; 1.3.2; 1.3.2; +9 more |
| CVE-2010-3867 | – | Nov 9 | Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories,… Affected: 1.2.10; 1.2.10; 1.2.10; 1.2.10; 1.3.0; 1.3.0; +26 more |
| CVE-2009-3639 | – | Oct 28 | The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name… Affected: through 1.3.2; 1.3.1; 1.3.2; 1.3.2; 1.3.2; 1.3.2; +1 more |
| CVE-2009-0543 | – | Feb 12 | ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not… Affected: 1.3.1 |
| CVE-2004-1602 | – | Oct 15 | ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing… Affected: 1.2.0 through 1.2.10 |
| CVE-2001-0136 | – | Mar 12 | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly… Affected: 1.2.0 |
Showing 34