Most recent entries from all

bdu:2024-02777

EUVD-2026-258480

fkie_cve-2023-51713

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

GHSA-6959-h9pv-vhf9

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

gsd-2023-51713

OESA-2024-1075 — proftpd security update

Affected: openEuler:20.03-LTS-SP1: proftpd, openEuler:20.03-LTS-SP4: proftpd, openEuler:22.03-LTS: proftpd, openEuler:22.03-LTS-SP1: proftpd, openEuler:22.03-LTS-SP2: proftpd, openEuler:22.03-LTS-SP3: proftpd

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory visibility. %if 1 This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included. %else This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by xinetd instead are included. %endif Security Fix(es): make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.(CVE-2023-51713)

openSUSE-SU-2024:0008-1 — Security update for proftpd

Security update for proftpd

UBUNTU-CVE-2023-51713

Affected: Ubuntu:16.04:LTS: proftpd-dfsg, Ubuntu:18.04:LTS: proftpd-dfsg, Ubuntu:20.04:LTS: proftpd-dfsg, Ubuntu:22.04:LTS: proftpd-dfsg

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

WID-SEC-W-2023-3203 — Pro-FTPd: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Pro-FTPd ausnutzen, um einen Denial of Service Angriff durchzuführen.