Skip to content
OpenAdvisories

Vendor

ProFTPD

5 known vulnerabilities.

Products

ProFTPD 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-63091

    ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser

    ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64_MAX, which res…

    ProFTPD ProFTPD proftpd-dfsg proftpd-dfsg Debian Ubuntu