Skip to content
OpenAdvisories
Medium WID-SEC-2026-4259 2 CVEs

ProFTPD: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Oct 29, 2026 · Updated Nov 10, 2026 · Revision 3 · de

Vendor: Fedora Vendor: SUSE Product: Linux Product: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in ProFTPD ausnutzen, um Dateien zu manipulieren.

Product

ProFTPD ist ein Open Source FTP-Server.

Vulnerabilities 2

  • Medium 5.3
    CVE-2026-119364

    ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass

    ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy that allows authenticated FTP users to bypass Limit WRITE restrictions via symlinks. Attackers can place a symlink in a writable directory and use SITE …

    ProFTPD Project ProFTPD proftpd-dfsg proftpd-dfsg Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2026-119147

    ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass

    ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for new destination files. Authenticated SFTP users can copy any readable file to a new path in write-denied directo…

    ProFTPD Project ProFTPD proftpd-dfsg proftpd-dfsg Debian Ubuntu Alpine

Revision history

  1. #3

    Neue Updates von SUSE aufgenommen

  2. #2

    Neue Updates von Fedora aufgenommen

  3. #1

    Initiale Fassung

References