Proftpd vulnerabilities

Products

• Proftpd 39

Newest

• proftpd ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass CVE-2026-119364 Fix available 6.0 MediumOctober 30, 2026
• proftpd ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass CVE-2026-119147 Fix available 5.3 MediumOctober 30, 2026
• proftpd ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap CVE-2026-119146 Fix available 6.3 MediumOctober 30, 2026
• proftpd ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser CVE-2026-63091 Fix available 7.1 HighJuly 20, 2026
• proftpd ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly CVE-2026-63090 Fix available 8.7 HighJuly 20, 2026
• proftpd ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation CVE-2026-53994 Fix available 7.7 HighJuly 18, 2026
• proftpd ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR CVE-2026-35025 8.6 HighJune 24, 2026
• proftpd In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in... CVE-2026-44331 Fix available 8.1 HighMay 5, 2026
• proftpd mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a... CVE-2026-42167 Public exploitFix available 8.1 HighApril 28, 2026
• proftpd ProFTPD 1.3.7a - Remote Denial of Service CVE-2021-47865 8.7 HighJanuary 21, 2026
• proftpd, proftpd project (professional ftp daemon) +1 more ProFTPD 1.3.3c Backdoor Command Execution CVE-2010-20103 Public exploit EPSS 13.8% 9.3 CriticalAugust 20, 2025
• proftpd In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access... CVE-2024-48651 Fix available 7.5 HighNovember 29, 2024
• proftpd make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon... CVE-2023-51713 Fix available 7.5 HighDecember 22, 2023
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• proftpd mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies... CVE-2021-46854 Fix available 7.5 HighNovember 23, 2022
• proftpd, debian linux, fedoraproject fedora +4 more +6 more In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer... CVE-2020-9273 Public exploitFix available EPSS 11.8% 8.8 HighFebruary 20, 2020
• proftpd, opensuse backports sle, leap +2 more +4 more ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c... CVE-2020-9272 Fix available 7.5 HighFebruary 20, 2020
• proftpd, debian linux, fedoraproject fedora +2 more An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL... CVE-2019-19269 Fix available 4.9 MediumNovember 26, 2019
• proftpd, fedoraproject fedora +1 more An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the... CVE-2019-19270 Fix available 7.5 HighNovember 26, 2019
• proftpd An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable,... CVE-2019-19271 Fix available 7.5 HighNovember 26, 2019
• proftpd An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL... CVE-2019-19272 Fix available 7.5 HighNovember 26, 2019
• proftpd ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service... CVE-2019-18217 Fix available EPSS 20.2% 7.5 HighOctober 21, 2019
• proftpd, debian linux, fedoraproject fedora +1 more +3 more An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code... CVE-2019-12815 Public exploitFix available EPSS 57.3% 9.8 CriticalJuly 19, 2019
• proftpd ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user... CVE-2017-7418 Fix available 5.5 MediumApril 4, 2017
• proftpd, fedoraproject fedora, opensuse +2 more The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle... CVE-2016-3125 Fix available 7.5 HighMarch 31, 2016
• proftpd, debian linux, fedoraproject fedora +2 more +4 more The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files... CVE-2015-3306 In KEVPublic exploitFix available EPSS 99.5% 10.0 HighMay 18, 2015
• proftpd Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to... CVE-2013-4359 Fix available 5.0 MediumSeptember 28, 2013
• proftpd ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the... CVE-2012-6095 Fix available 1.2 LowJanuary 13, 2013
• proftpd Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote... CVE-2011-4130 Fix available EPSS 12.6% 9.0 HighNovember 15, 2011
• proftpd Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote... CVE-2011-1137 Public exploitFix available EPSS 28.1% 5.0 MediumMarch 7, 2011
• proftpd Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD... CVE-2010-4652 Fix available EPSS 11.2% 6.8 MediumFebruary 2, 2011
• proftpd Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD... CVE-2010-4221 Public exploitFix available EPSS 91.3% 10.0 HighNovember 9, 2010
• proftpd Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c... CVE-2010-3867 Fix available 7.1 HighNovember 9, 2010
• proftpd The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a... CVE-2008-7265 Fix available 4.0 MediumNovember 9, 2010
• proftpd The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired... CVE-2009-3639 Fix available 5.8 MediumOctober 28, 2009
• proftpd ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection... CVE-2009-0543 Public exploitFix available EPSS 15.8% 6.8 MediumFebruary 12, 2009
• proftpd ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given... CVE-2004-1602 Public exploit EPSS 30.7% 5.0 MediumOctober 15, 2004
• proftpd Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows... CVE-2004-0346 7.8 HighMarch 18, 2004
• proftpd, conectiva linux, mandrakesoft mandrake linux +2 more Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series... CVE-2001-0136 Public exploit EPSS 44.9% 5.0 MediumMarch 12, 2001