https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:30:37.829745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-456 certa-2009-avi-456 — Une vulnérabilité dans ProFTPD permet à une personne malintentionnée de contourner la politique de sécurité. 2026-10-10T14:30:37.836436+00:00 certa-2009-avi-456 https://cve.radiocsirt.org/vuln/euvd-2026-124270 EUVD-2026-124270 2026-10-10T14:30:37.836475+00:00 EUVD-2026-124270 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3639 fkie_cve-2009-3639 2026-10-10T14:30:37.836490+00:00

The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/ghsa-4vq9-9g4j-pgg4 GHSA-4vq9-9g4j-pgg4 2026-10-10T14:30:37.836521+00:00

The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://cve.radiocsirt.org/vuln/gsd-2009-3639 gsd-2009-3639 2026-10-10T14:30:37.836539+00:00 gsd-2009-3639 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10048-1 openSUSE-SU-2024:10048-1 — proftpd-1.3.5b-2.5 on GA media 2026-10-10T14:30:37.836550+00:00

proftpd-1.3.5b-2.5 on GA media