CVE-2011-4130
Gentoo Linux Security Advisory 201309-15
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
Una vulnerabilidad de uso después de liberación en la API de Respuesta en ProFTPD antes de v1.3.3g permite a usuarios remotos autenticados ejecutar código de su elección a través de vectores que implican un error que se produce después de una transferencia de datos FTP.
Multiple vulnerabilities have been found in ProFTPD, the worst of which leading to remote execution of arbitrary code. Versions less than 1.3.4d are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-10-18 CVE Reserved
- 2011-12-06 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2025-06-05 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-399: Resource Management Errors
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.proftpd.org/docs/NEWS-1.3.3g | X_refsource_confirm | |
| http://www.securityfocus.com/bid/50631 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-11-328 | X_refsource_misc |
|
| URL | Date | SRC |
|---|---|---|
| http://bugs.proftpd.org/show_bug.cgi?id=3711 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | <= 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version " <= 1.3.3" | f |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | pre10 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | pre9 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.0 Search vendor "Proftpd" for product "Proftpd" and version "1.2.0" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.1 Search vendor "Proftpd" for product "Proftpd" and version "1.2.1" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.2 Search vendor "Proftpd" for product "Proftpd" and version "1.2.2" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.2 Search vendor "Proftpd" for product "Proftpd" and version "1.2.2" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.2 Search vendor "Proftpd" for product "Proftpd" and version "1.2.2" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.2 Search vendor "Proftpd" for product "Proftpd" and version "1.2.2" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.3 Search vendor "Proftpd" for product "Proftpd" and version "1.2.3" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.4 Search vendor "Proftpd" for product "Proftpd" and version "1.2.4" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.5 Search vendor "Proftpd" for product "Proftpd" and version "1.2.5" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.5 Search vendor "Proftpd" for product "Proftpd" and version "1.2.5" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.5 Search vendor "Proftpd" for product "Proftpd" and version "1.2.5" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.5 Search vendor "Proftpd" for product "Proftpd" and version "1.2.5" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.6 Search vendor "Proftpd" for product "Proftpd" and version "1.2.6" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.6 Search vendor "Proftpd" for product "Proftpd" and version "1.2.6" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.6 Search vendor "Proftpd" for product "Proftpd" and version "1.2.6" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.7 Search vendor "Proftpd" for product "Proftpd" and version "1.2.7" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.7 Search vendor "Proftpd" for product "Proftpd" and version "1.2.7" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.7 Search vendor "Proftpd" for product "Proftpd" and version "1.2.7" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.7 Search vendor "Proftpd" for product "Proftpd" and version "1.2.7" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.8 Search vendor "Proftpd" for product "Proftpd" and version "1.2.8" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.8 Search vendor "Proftpd" for product "Proftpd" and version "1.2.8" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.8 Search vendor "Proftpd" for product "Proftpd" and version "1.2.8" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.9 Search vendor "Proftpd" for product "Proftpd" and version "1.2.9" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.9 Search vendor "Proftpd" for product "Proftpd" and version "1.2.9" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.9 Search vendor "Proftpd" for product "Proftpd" and version "1.2.9" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.9 Search vendor "Proftpd" for product "Proftpd" and version "1.2.9" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.10 Search vendor "Proftpd" for product "Proftpd" and version "1.2.10" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.10 Search vendor "Proftpd" for product "Proftpd" and version "1.2.10" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.10 Search vendor "Proftpd" for product "Proftpd" and version "1.2.10" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.2.10 Search vendor "Proftpd" for product "Proftpd" and version "1.2.10" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | a |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | rc4 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.0 Search vendor "Proftpd" for product "Proftpd" and version "1.3.0" | rc5 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.1 Search vendor "Proftpd" for product "Proftpd" and version "1.3.1" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.1 Search vendor "Proftpd" for product "Proftpd" and version "1.3.1" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.1 Search vendor "Proftpd" for product "Proftpd" and version "1.3.1" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.1 Search vendor "Proftpd" for product "Proftpd" and version "1.3.1" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.2 Search vendor "Proftpd" for product "Proftpd" and version "1.3.2" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.2 Search vendor "Proftpd" for product "Proftpd" and version "1.3.2" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.2 Search vendor "Proftpd" for product "Proftpd" and version "1.3.2" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.2 Search vendor "Proftpd" for product "Proftpd" and version "1.3.2" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.2 Search vendor "Proftpd" for product "Proftpd" and version "1.3.2" | rc4 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | - |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | a |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | b |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | c |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | d |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | e |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | rc1 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | rc2 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | rc3 |
Affected
| ||||||
| Proftpd Search vendor "Proftpd" | Proftpd Search vendor "Proftpd" for product "Proftpd" | 1.3.3 Search vendor "Proftpd" for product "Proftpd" and version "1.3.3" | rc4 |
Affected
| ||||||