Skip to content
OpenAdvisories
Unscored DSA-1730-1 2 CVEs

proftpd-dfsg - SQL injection vulnerabilites

Published Mar 2, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 proftpd-dfsg 1.3.1-17lenny2

Vulnerabilities 2

  • Unscored —
    CVE-2009-0542 Public exploit EPSS 74%

    SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL c…

    proftpd-dfsg Debian
  • Unscored —
    CVE-2009-0543 Public exploit EPSS 16%

    ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms v…

    proftpd-dfsg Debian