CVE-2017-7418

🗓️ 04 Apr 2017 17:59:00Reported by [email protected]Type

ProFTPD version before 1.3.5e and 1.3.6rc5 allows local attackers to bypass security controls by using symbolic links in the home directory of an FTP use

Reporter	Title	Published	Views	Family All 52
ALT Linux	Security fix for the ALT Linux 8 package proftpd version 1.3.5-alt4.rel.e	2 Jan 201800:00	–	altlinux
FreeBSD	proftpd -- user chroot escape vulnerability	6 Mar 201700:00	–	freebsd
CNVD	ProFTPD Local Security Bypass Vulnerability	6 Apr 201700:00	–	cnvd
CVE	CVE-2017-7418	4 Apr 201717:00	–	cve
Cvelist	CVE-2017-7418	4 Apr 201717:00	–	cvelist
Debian CVE	CVE-2017-7418	4 Apr 201717:00	–	debiancve
EUVD	EUVD-2017-16442	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 25 Update: proftpd-1.3.5e-1.fc25	19 Apr 201709:32	–	fedora
Fedora	[SECURITY] Fedora 24 Update: proftpd-1.3.5e-1.fc24	18 Apr 201716:50	–	fedora
Fedora	[SECURITY] Fedora 26 Update: proftpd-1.3.5e-1.fc26	14 Apr 201717:23	–	fedora

NVD

Node

proftpd proftpdRange≤1.3.5d

proftpd proftpdMatch1.3.6

proftpd proftpdMatch1.3.6rc1

proftpd proftpdMatch1.3.6rc2

proftpd proftpdMatch1.3.6rc3

proftpd proftpdMatch1.3.6rc4

Source	Link
github	www.github.com/proftpd/proftpd/pull/444/commits/349addc3be4fcdad9bd4ec01ad1ccd916c898ed8
github	www.github.com/proftpd/proftpd/commit/ecff21e0d0e84f35c299ef91d7fda088e516d4ed
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html
github	www.github.com/proftpd/proftpd/commit/f59593e6ff730b832dbe8754916cb5c821db579f
bugs	www.bugs.proftpd.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/97409

13 May 2026 00:24Current

5.3Medium risk

Vulners AI Score5.3

CVSS 22.1

CVSS 35.5

EPSS0.00039

CWE-59