Ubuntu.comUB:CVE-2010-4652CVE-2010-4652
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.256 Low
EPSS
Percentile
96.7%
Heap-based buffer overflow in the sql_prepare_where function
(contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled,
allows remote attackers to cause a denial of service (crash) and possibly
execute arbitrary code via a crafted username containing substitution tags,
which are not properly handled during construction of an SQL query.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.04 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
| ubuntu | 11.10 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
| ubuntu | 12.04 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
| ubuntu | 12.10 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
| ubuntu | 13.04 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
| ubuntu | 13.10 | noarch | proftpd-dfsg | < 1.3.3d-4 | UNKNOWN |
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.256 Low
EPSS
Percentile
96.7%