// For flags

CVE-2010-3867

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow

Severity Score

7.1
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.

Múltiple eulnerabilidad de salto de directorio en el módulo mod_site_misc en ProFTPD anterior v1.3.3c permite a usuarios autenticados remotamente crear directorios, borrarlos, crear enlaces simbólicos, y modificar el timestamps de ficheros a través de secuencias de directorio transversal en un comando (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, o (4) SITE UTIME

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-10-08 CVE Reserved
  • 2010-11-05 CVE Published
  • 2023-05-10 EPSS Updated
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.2.10
Search vendor "Proftpd" for product "Proftpd" and version "1.2.10"
-
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.2.10
Search vendor "Proftpd" for product "Proftpd" and version "1.2.10"
rc1
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.2.10
Search vendor "Proftpd" for product "Proftpd" and version "1.2.10"
rc2
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.2.10
Search vendor "Proftpd" for product "Proftpd" and version "1.2.10"
rc3
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
-
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
a
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
rc1
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
rc2
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
rc3
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
rc4
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.0
Search vendor "Proftpd" for product "Proftpd" and version "1.3.0"
rc5
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.1
Search vendor "Proftpd" for product "Proftpd" and version "1.3.1"
-
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.1
Search vendor "Proftpd" for product "Proftpd" and version "1.3.1"
rc1
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.1
Search vendor "Proftpd" for product "Proftpd" and version "1.3.1"
rc2
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.1
Search vendor "Proftpd" for product "Proftpd" and version "1.3.1"
rc3
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
-
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
a
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
b
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
c
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
d
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
e
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
rc1
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
rc2
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
rc3
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.2
Search vendor "Proftpd" for product "Proftpd" and version "1.3.2"
rc4
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
-
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
a
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
b
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
rc1
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
rc2
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
rc3
Affected
Proftpd
Search vendor "Proftpd"
Proftpd
Search vendor "Proftpd" for product "Proftpd"
1.3.3
Search vendor "Proftpd" for product "Proftpd" and version "1.3.3"
rc4
Affected