CVSS: 5.3EPSS: 3%CPEs: 1EXPL: 4CVE-2004-1602 – ProFTPd 1.2.10 - Remote Users Enumeration
https://notcve.org/view.php?id=CVE-2004-1602
15 Oct 2004 — ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response. • https://www.exploit-db.com/exploits/581 • CWE-203: Observable Discrepancy •
CVSS: 9.1EPSS: 1%CPEs: 11EXPL: 0CVE-2004-0432
https://notcve.org/view.php?id=CVE-2004-0432
05 May 2004 — ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions. ProFTPD 1.2.9 trata las directivas Permitir y Denegar para ACLS basadas en CIDR como si fueran AllowAll (Permitir Todo), lo que podría permitir a clientes FTP saltarse las restricciones de acceso pretendidas. • http://bugs.proftpd.org/show_bug.cgi?id=2267 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2004-0346
https://notcve.org/view.php?id=CVE-2004-0346
18 Mar 2004 — Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command. • http://marc.info/?l=bugtraq&m=107824679817240&w=2 • CWE-193: Off-by-one Error •
CVSS: 9.8EPSS: 37%CPEs: 9EXPL: 3CVE-2003-0831 – ProFTPd 1.2.7/1.2.8 - '.ASCII' File Transfer Buffer Overrun
https://notcve.org/view.php?id=CVE-2003-0831
25 Sep 2003 — ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files. ProFTPD 1.2.7 a 1.2.9rc2 no traduce adecuadamente los caractéres de nueva línea cuando transfiere caractéres en modo ASCII, permite a atancantes remotos ejecutar código arbitrario mediante un desbordamiento de búfer usando ciertos ficheros. • https://www.exploit-db.com/exploits/23170 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 1CVE-2003-0500 – ProFTPd 1.2.9 RC1 - 'mod_sql' SQL Injection
https://notcve.org/view.php?id=CVE-2003-0500
04 Jul 2003 — SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name. Vulnerabilidad de inyección de SQL en el módulo de autenticación de PostgreSQL (mod_sql_postgress) de ProFTPD anteriores a 1.2.9rc1 permite a atacantes remotos ejecutar SLQ arbitrario y ganar privilegios saltándose la autenticación o robando contraseñas media... • https://www.exploit-db.com/exploits/43 •
CVSS: 9.1EPSS: 1%CPEs: 17EXPL: 0CVE-2001-1500
https://notcve.org/view.php?id=CVE-2001-1500
31 Dec 2001 — ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 •
CVSS: 7.5EPSS: 8%CPEs: 1EXPL: 1CVE-2001-1501 – WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion
https://notcve.org/view.php?id=CVE-2001-1501
31 Dec 2001 — The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument. • https://www.exploit-db.com/exploits/20690 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2001-0318
https://notcve.org/view.php?id=CVE-2001-0318
07 May 2001 — Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd). • http://archives.neohapsis.com/archives/bugtraq/2001-02/0117.html •
CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 5CVE-2001-0136 – ProFTPd 1.2.0 pre10 - Remote Denial of Service
https://notcve.org/view.php?id=CVE-2001-0136
12 Mar 2001 — Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed. • https://www.exploit-db.com/exploits/244 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1475
https://notcve.org/view.php?id=CVE-1999-1475
19 Nov 1999 — ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command. • http://www.securityfocus.com/archive/1/35483 •