Vulnerability in Proftpd_project Proftpd
CVE-2001-0027
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.
EPSS: 0.065 (93.0th percentile) — read the EPSS interpretation.
Affected products
- Proftpd_project Proftpd
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)