Skip to content
OpenAdvisories
Unscored DSA-1727-1 2 CVEs

- SQL injection vulnerabilites

Published Feb 26, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 proftpd-dfsg 1.3.1-17lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2009-0542 Public exploit EPSS 74%

    SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-0543 Public exploit EPSS 16%

    ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms v…