Vulnerability in Proftpd Project
CVE-2005-2390
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
EPSS: 0.092 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Proftpd_project Proftpd — versions 1.2.0_pre9, 1.2.0_pre10, 1.2.0_rc1
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_OPENPKG)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)