Lucene search

K
cvelistRedhatCVELIST:CVE-2010-4652
HistoryFeb 02, 2011 - 12:00 a.m.

CVE-2010-4652

2011-02-0200:00:00
redhat
raw.githubusercontent.com
2

8.1 High

AI Score

Confidence

High

0.256 Low

EPSS

Percentile

96.7%

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.

8.1 High

AI Score

Confidence

High

0.256 Low

EPSS

Percentile

96.7%