Lucene search
+L

22 matches found

Fedora
Fedora
added 2026/07/18 12:27 a.m.21 views

[SECURITY] Fedora 44 Update: proftpd-1.3.9c-1.fc44

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

5.4AI score
SaveExploits0
Fedora
Fedora
added 2026/05/08 7:40 p.m.13 views

[SECURITY] Fedora 42 Update: proftpd-1.3.9a-1.fc42

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

8.1CVSS6AI score0.04438EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/05/02 9:9 a.m.170 views

Exploit for CVE-2026-42167

CVE-2026-42167 Master Exploit Tool A professional security re...

8.1CVSS6AI score0.04438EPSS
SaveExploits7
EUVD
EUVD
added 2026/01/21 5:27 p.m.7 views

EUVD-2026-3621

ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access...

8.7CVSS5.5AI score0.00538EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-0547

Malware in sbrugna...

6.8CVSS7.3AI score0.18722EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.27 views

The vulnerability of the ProFTPD FTP server, related to a memory release error, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ProFTPD FTP server is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.2AI score0.01129EPSS
SaveExploits1References8Affected Software3
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.4 views

SUSE CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.5CVSS8.7AI score0.77398EPSS
SaveExploits3References3
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.10 views

The vulnerability in the implementation of the alloc_pool function of the ProFTPD server allows a hacker to execute arbitrary code.

The vulnerability of the ProFTPD FTP-server’s allocpool function relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.7AI score0.12045EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2016/04/20 12:0 a.m.20 views

The vulnerability of the ProFTPd FTP server allows a hacker to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the modtls module in the ProFTPd FTP server exists due to incorrect processing of the TLSDHParamFile directive. Exploiting this vulnerability allows a malicious actor to compromise the integrity, availability, and confidentiality of information...

10CVSS7.1AI score0.06979EPSS
SaveExploits0References8Affected Software2
myhack58
myhack58
added 2014/09/07 12:0 a.m.25 views

ProFTPD 1.3.0/1.3.0 a (mod_ctrls support) Local Buffer Overflow Exploit vulnerabilities and attack code analysis-vulnerability warning-the black bar safety net

Exploit code URL: ! 1, Operating environment: 1, The ProFTPD 1.3.0/1.3.0 a 2, the compiled ProFTPD,--enable-ctrls option must be open ./ configure --enable-ctrls 3, the local user need to have through the Unix Socket permission to connect 2, The Run parameters: revenge@darklight$ ./...

0.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/01/27 7:29 a.m.6 views

Fedora Web Site Hacked, But the Servers Undamaged !

An attacker who had credentials and the use of taxpayer Fedora Fedora server, but the project leaders say the assailants apparently managed to compromise any software or servers. An attacker has attempted to compromise the servers for the Fedora Project, the community version of Red Hat Enterpris...

6.8AI score
SaveExploits0
Metasploit
Metasploit
added 2011/01/09 11:23 p.m.57 views

ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)

This module exploits a stack-based buffer overflow in versions 1.2 through 1.3.0 of ProFTPD server. The vulnerability is within the "sreplace" function within the "src/support.c" file. The off-by-one heap overflow bug in the ProFTPD sreplace function has been discovered about 2 two years ago by...

10CVSS0.73663EPSS
SaveExploits5
Prion
Prion
added 2009/02/12 4:30 p.m.41 views

Sql injection

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.5CVSS8.7AI score0.77398EPSS
SaveExploits3References13Affected Software1
OSV
OSV
added 2009/02/12 4:30 p.m.9 views

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

7.4AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2009/02/12 4:30 p.m.31 views

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.5CVSS7.4AI score0.77398EPSS
SaveExploits3References1
OSV
OSV
added 2009/02/12 4:30 p.m.10 views

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

8AI score
SaveExploits0References13
OSV
OSV
added 2009/02/12 4:30 p.m.1 views

DEBIAN-CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.5CVSS8.7AI score0.77398EPSS
SaveExploits3References1
Debian CVE
Debian CVE
added 2009/02/12 4:0 p.m.50 views

CVE-2009-0543

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in 1 modsqlmysql and 2 modsqlpostgres...

6.8CVSS7.6AI score0.18722EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2009/02/12 4:0 p.m.28 views

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.5CVSS8.2AI score0.77398EPSS
SaveExploits3
Cvelist
Cvelist
added 2009/02/12 4:0 p.m.35 views

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

7.9AI score0.77398EPSS
SaveExploits3References13
Rows per page
Query Builder