Vulnerability in Proftpd Project
CVE-2001-1501
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument.
EPSS: 0.384 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Proftpd_project Proftpd — versions 1.2.1
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)