GCVE - cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

Vendor	Proftpd Project (`9b8550e8-ed74-5029-b470-0fde245de142`)
Product	Proftpd (`18346eeb-f1c7-598a-aae3-20e7d103ba5e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/proftpd/proftpd`	purl2cpe	2026-06-01 10:12:40.948593
`pkg:golang/github.com/proftpd/proftpd`	purl2cpe	2026-06-01 10:12:40.948595

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-4816`	vulnerable	2026-06-08 04:48:45.222274	Details available Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password. Published: 2006-12-23T11:00:00.000Z Updated: 2024-08-08T00:01:23.301Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html http://bugs.proftpd.org/show_bug.cgi?id=2658 http://www.securityfocus.com/bid/16535 http://www.debian.org/security/2007/dsa-1245 http://www.osvdb.org/23063	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2390`	vulnerable	2026-06-08 04:48:29.204748	Details available Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive. Published: 2005-07-27T04:00:00.000Z Updated: 2024-08-07T22:22:49.114Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=112604373503912&w=2 http://www.securityfocus.com/bid/14381 http://www.securityfocus.com/bid/14380 http://www.debian.org/security/2005/dsa-795 http://secunia.com/advisories/16181	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1501`	vulnerable	2026-06-08 04:46:20.176432	Details available The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "/..", (2) "/.", or (3) "../*?/" sequences in the argument. Published: 2005-06-21T04:00:00.000Z Updated: 2024-08-08T04:58:11.373Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDKSA-2002:005 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 http://online.securityfocus.com/archive/1/169395	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1500`	vulnerable	2026-06-08 04:46:20.168244	Details available ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. Published: 2005-06-21T04:00:00.000Z Updated: 2024-08-08T04:58:11.664Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/212805 http://www.securityfocus.com/bid/3310 http://www.mandriva.com/security/advisories?name=MDKSA-2002:005 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 https://exchange.xforce.ibmcloud.com/vulnerabilities/7126	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.