Summary
ProFTPD is prone to a remote code-execution vulnerability.
Successful exploits will allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.
ProFTPD prior to 1.3.3g are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Severity
Classification
-
CVE CVE-2011-4130 -
CVSS Base Score: 9.0
AV:N/AC:L/Au:S/C:C/I:C/A:C
Related Vulnerabilities
- httpdx Multiple Commands Remote Buffer Overflow Vulnerabilities
- BisonFTP Multiple Commands Remote Buffer Overflow Vulnerabilities
- AceFTP LIST Command Directory Traversal Vulnerability
- SolarFTP 'PASV' Command Remote Buffer Overflow Vulnerability
- XM Easy Personal FTP Server 'NLST' Command Remote Denial of Service Vulnerability