Skip to content
OpenAdvisories

Package · Debian

proftpd-dfsg

43 known vulnerabilities.

11 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42167 Public exploit

    mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where t…

  • Medium 5.9
    CVE-2023-48795 Public exploit EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

  • Unscored —
    CVE-2020-9273 Public exploit EPSS 12%

    In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a …

  • Unscored —
    CVE-2019-12815 Public exploit EPSS 57%

    An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and informati…

  • Critical 10.0
    CVE-2015-3306 Exploited Public exploit EPSS 99%

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

    KEV Oct 8, 2026
  • Unscored —
    CVE-2011-1137 Public exploit EPSS 28%

    Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a den…

  • Unscored —
    CVE-2010-4221 Public exploit EPSS 91%

    Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow re…

  • Unscored —
    CVE-2009-0542 Public exploit EPSS 74%

    SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2009-0543 Public exploit EPSS 16%

    ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms v…

  • Unscored —
    CVE-2006-6563 Public exploit

    Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before …

  • Unscored —
    CVE-2006-5815 Public exploit EPSS 75%

    Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably aut…