Unscored CVE-2001-0318 EUVD-2001-0318GHSA-mvfg-c8h4-mj4g

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usi…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd).

References

MDKSA-2001:021 vendor-advisory
CLA-2001:380 vendor-advisory
proftpd-format-string(6433) vdb-entry
20010110 proftpd 1.2.0rc2 -- example of bad coding mailing-list
20010206 Response to ProFTPD issues mailing-list
DSA-029 vendor-advisory