Lucene search

K
nvd[email protected]NVD:CVE-2011-4130
HistoryDec 06, 2011 - 11:55 a.m.

CVE-2011-4130

2011-12-0611:55:06
CWE-399
web.nvd.nist.gov
1

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.4%

Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.

Affected configurations

NVD
Node
proftpdproftpdRange≀1.3.3f
OR
proftpdproftpdMatch1.2.0
OR
proftpdproftpdMatch1.2.0pre10
OR
proftpdproftpdMatch1.2.0pre9
OR
proftpdproftpdMatch1.2.0rc1
OR
proftpdproftpdMatch1.2.0rc2
OR
proftpdproftpdMatch1.2.0rc3
OR
proftpdproftpdMatch1.2.1
OR
proftpdproftpdMatch1.2.2
OR
proftpdproftpdMatch1.2.2rc1
OR
proftpdproftpdMatch1.2.2rc2
OR
proftpdproftpdMatch1.2.2rc3
OR
proftpdproftpdMatch1.2.3
OR
proftpdproftpdMatch1.2.4
OR
proftpdproftpdMatch1.2.5
OR
proftpdproftpdMatch1.2.5rc1
OR
proftpdproftpdMatch1.2.5rc2
OR
proftpdproftpdMatch1.2.5rc3
OR
proftpdproftpdMatch1.2.6
OR
proftpdproftpdMatch1.2.6rc1
OR
proftpdproftpdMatch1.2.6rc2
OR
proftpdproftpdMatch1.2.7
OR
proftpdproftpdMatch1.2.7rc1
OR
proftpdproftpdMatch1.2.7rc2
OR
proftpdproftpdMatch1.2.7rc3
OR
proftpdproftpdMatch1.2.8
OR
proftpdproftpdMatch1.2.8rc1
OR
proftpdproftpdMatch1.2.8rc2
OR
proftpdproftpdMatch1.2.9
OR
proftpdproftpdMatch1.2.9rc1
OR
proftpdproftpdMatch1.2.9rc2
OR
proftpdproftpdMatch1.2.9rc3
OR
proftpdproftpdMatch1.2.10
OR
proftpdproftpdMatch1.2.10rc1
OR
proftpdproftpdMatch1.2.10rc2
OR
proftpdproftpdMatch1.2.10rc3
OR
proftpdproftpdMatch1.3.0
OR
proftpdproftpdMatch1.3.0a
OR
proftpdproftpdMatch1.3.0rc1
OR
proftpdproftpdMatch1.3.0rc2
OR
proftpdproftpdMatch1.3.0rc3
OR
proftpdproftpdMatch1.3.0rc4
OR
proftpdproftpdMatch1.3.0rc5
OR
proftpdproftpdMatch1.3.1
OR
proftpdproftpdMatch1.3.1rc1
OR
proftpdproftpdMatch1.3.1rc2
OR
proftpdproftpdMatch1.3.1rc3
OR
proftpdproftpdMatch1.3.2
OR
proftpdproftpdMatch1.3.2rc1
OR
proftpdproftpdMatch1.3.2rc2
OR
proftpdproftpdMatch1.3.2rc3
OR
proftpdproftpdMatch1.3.2rc4
OR
proftpdproftpdMatch1.3.3
OR
proftpdproftpdMatch1.3.3a
OR
proftpdproftpdMatch1.3.3b
OR
proftpdproftpdMatch1.3.3c
OR
proftpdproftpdMatch1.3.3d
OR
proftpdproftpdMatch1.3.3e
OR
proftpdproftpdMatch1.3.3rc1
OR
proftpdproftpdMatch1.3.3rc2
OR
proftpdproftpdMatch1.3.3rc3
OR
proftpdproftpdMatch1.3.3rc4

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.4%