https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 04:17:54 +0000 https://cve.radiocsirt.org/vuln/cve-2023-51713 <p>make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.</p> <p>make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.</p> https://cve.radiocsirt.org/vuln/cve-2023-51713 https://cve.radiocsirt.org/vuln/usn-7297-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: proftpd-dfsg, Ubuntu:22.04:LTS: proftpd-dfsg, Ubuntu:24.04:LTS: proftpd-dfsg</p> <p>Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could use this vulnerability to bypass security features like encryption and integrity checks. (CVE-2023-48795)</p> <p>Martin Mirchev discovered that ProFTPD did not properly validate user input over the network. An attacker could use this vulnerability to crash ProFTPD or execute arbitrary code. (CVE-2023-51713)</p> <p>Brian Ristuccia discovered that ProFTPD incorrectly inherited groups from the parent process. An attacker could use this vulnerability to elevate privileges. (CVE-2024-48651)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: proftpd-dfsg, Ubuntu:22.04:LTS: proftpd-dfsg, Ubuntu:24.04:LTS: proftpd-dfsg</p> <p>Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could use this vulnerability to bypass security features like encryption and integrity checks. (CVE-2023-48795)</p> <p>Martin Mirchev discovered that ProFTPD did not properly validate user input over the network. An attacker could use this vulnerability to crash ProFTPD or execute arbitrary code. (CVE-2023-51713)</p> <p>Brian Ristuccia discovered that ProFTPD incorrectly inherited groups from the parent process. An attacker could use this vulnerability to elevate privileges. (CVE-2024-48651)</p> https://cve.radiocsirt.org/vuln/usn-7297-1