ProFTPD < 1.3.7 Multiple Vulnerabilities

ProFTPD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; ifdescription...

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

UBUNTU-CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

Windows kernel NtUserScrollDC memory corruption

The attached testcases crashes Windows 7 x86 with Special Pool enabled on win32k. The crash occurs while accessing unmapped memory. The bogus address is returned by a call to FastWindowFromDC. This is likely to be a freed window object. Recent assessments: busterb at May 09, 2019 5:57pm UTC...

PT-2020-5165 · Proftpd +2 · Proftpd +2

Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.5e+r1.3.5-2+deb8u7 ProFTPD versions prior to 1.3.6-alt0.4.ga73dbfe3b ProFTPD versions prior to 1.3.6-4+deb10u4 ProFTPD version 1.3.7 Description: ProFTPD contains a use-after-free vulnerability within the memory...

CVE-2019-0679

CVE-2019-0679 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-0691

This CVE entry is rejected/not used; the candidate was in CNA pool and not assigned to issues in 2019.

CVE-2019-0705

This CVE-2019-0705 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-0687

CVE-2019-0687 entry is rejected/not used; this candidate is not an active vulnerability entry.

CVE-2019-0544

This CVE-2019-0544 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-0589

CVE-2019-0589 is rejected/not used per the initial description.

CVE-2019-0978

CVE-2019-0978 entry is rejected/not used; not an active vulnerability entry.

CVE-2019-0781

CVE-2019-0781 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2019-0944

CVE-2019-0944 is rejected and does not represent an active vulnerability entry.

CVE-2019-0854

CVE-2019-0854 entry is rejected/not used per the description.

CVE-2019-0873

CVE-2019-0873 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2019-0939

CVE-2019-0939 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2019-0834

CVE-2019-0834 entry is rejected and does not represent an active vulnerability entry.

CVE-2019-0997

This CVE entry is rejected/not used and does not represent an active vulnerability.