CVE-2005-2390
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a...
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
Exploit likelihood
What each source reports
NVD Score used
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
- Record
CVE-2005-2390- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
- Record
CVE-2005-2390- Updated
- 2026-11-02
EUVDEUVD-2005-2391 No score
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
- Record
EUVD-2005-2391- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxr8-fr7q-582m No score
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a...
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
- Record
GHSA-mxr8-fr7q-582m- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
proftpdDebian:3.1 |
before 1.2.10-15sarge1, plus listed versions 1.2.10-15 |
1.2.10-15sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2390 is a medium vulnerability (CVSS 6.4) in Proftpd Project Proftpd, published July 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.20%, the 95th percentile. Fixed in proftpd 1.2.10-15sarge1.