FreeBSD: proftpd -- remote code execution vulnerabilities (Multiple CVEs)
|10||(AV:N/AC:L/Au:N/C:C/I:C/A:C)||November 07, 2006||May 07, 2014||February 12, 2015|
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit."
Free Nexpose Download
Discover, prioritize, and remediate security risks today!