proftpd-dfsg vulnerabilities (Debian)
48 vulnerabilities.
-
proftpd-dfsgDebian ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass 6.0 Medium -
proftpd-dfsgDebian ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass 5.3 Medium -
proftpd-dfsgDebian ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap 6.3 Medium -
proftpd-dfsgDebian ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser 7.1 High -
proftpd-dfsgDebian ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly 8.7 High -
proftpd-dfsgDebian ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation 7.7 High -
proftpd-dfsgDebian ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR 8.6 High -
proftpd-dfsgDebian In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in... 8.1 High -
proftpd-dfsgDebian mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a... 8.1 High -
proftpd-dfsgDebian Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute... 7.5 High -
proftpd-dfsgDebian In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access... 7.5 High -
proftpd-dfsgDebian make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon... 7.5 High -
proftpd-dfsgDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
proftpd-dfsgDebian mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies... 7.5 High -
proftpd-dfsgDebian proftpd-dfsg - regression update No score -
proftpd-dfsgDebian proftpd-dfsg - security update No score -
proftpd-dfsgDebian In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer... 8.8 High -
proftpd-dfsgDebian ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c... 7.5 High -
proftpd-dfsgDebian An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL... 4.9 Medium -
proftpd-dfsgDebian An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the... 7.5 High -
proftpd-dfsgDebian An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable,... 7.5 High -
proftpd-dfsgDebian An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL... 7.5 High -
proftpd-dfsgDebian ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service... 7.5 High -
proftpd-dfsgDebian An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code... 9.8 Critical -
proftpd-dfsgDebian proftpd-dfsg - regression update No score -
proftpd-dfsgDebian proftpd-dfsg - regression update No score -
proftpd-dfsgDebian proftpd-dfsg - security update No score -
proftpd-dfsgDebian ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user... 5.5 Medium -
proftpd-dfsgDebian The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle... 7.5 High -
proftpd-dfsgDebian The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files... 10.0 High -
proftpd-dfsgDebian Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to... 5.0 Medium -
proftpd-dfsgDebian ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the... 1.2 Low -
proftpd-dfsgDebian Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote... 9.0 High -
proftpd-dfsgDebian Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote... 5.0 Medium -
proftpd-dfsgDebian Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD... 6.8 Medium -
proftpd-dfsgDebian Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD... 10.0 High -
proftpd-dfsgDebian Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c... 7.1 High -
proftpd-dfsgDebian The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a... 4.0 Medium -
proftpd-dfsgDebian The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired... 5.8 Medium -
proftpd-dfsgDebian ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection... 6.8 Medium -
proftpd-dfsgDebian SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to... 7.5 High -
proftpd-dfsgDebian ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows... 6.8 Medium -
proftpd-dfsgDebian The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are... 5.1 Medium -
proftpd-dfsgDebian Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls... 6.6 Medium -
proftpd-dfsgDebian Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1... 7.5 High -
proftpd-dfsgDebian ** DISPUTED ** ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when... 7.5 High -
proftpd-dfsgDebian Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote... 10.0 High -
proftpd-dfsgDebian Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a... 7.5 High