What is CVE-2008-7265?

CVE-2008-7265 is a vulnerability in Proftpd, classified under CWE-399. Published 2010-11-09.

Is CVE-2008-7265 known to be exploited?

13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Proftpd

CVE-2008-7265

The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

Proftpd — versions 1.2.7, 1.3.2, 1.2.8
N/a — versions n/a

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

ARPSyndicate/cvemon
DButter/whitehat_
Dokukin1/Metasploitable
Furious992/HW13-01
Iknowmyname/Nmap-Scans-M2
NikulinMS/13-01-hw
Zhivarev/13-01-hw
firatesatoglu/shodanSearch
lekctut/sdb-hw-13-01
mrt2h/DZ

References

cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_CONFIRM, Patch)

Frequently asked questions

What is CVE-2008-7265?: CVE-2008-7265 is a vulnerability in Proftpd, classified under CWE-399. Published 2010-11-09.
Is CVE-2008-7265 known to be exploited?: 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.