CVEvulnerability

CVE-2005-2390

6.4 MEDIUM Published 2005-07-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P

Description

Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

Affected configurations

• proftpd project proftpd 1.2.0 pre9 • proftpd project proftpd 1.2.0 pre10 • proftpd project proftpd 1.2.0 rc1 • proftpd project proftpd 1.2.0 rc2 • proftpd project proftpd 1.2.0 rc3 • proftpd project proftpd 1.2.1 • proftpd project proftpd 1.2.1 final • proftpd project proftpd 1.2.2 • proftpd project proftpd 1.2.2 rc1 • proftpd project proftpd 1.2.2 rc2 • proftpd project proftpd 1.2.2 rc3 • proftpd project proftpd 1.2.3 • proftpd project proftpd 1.2.4 • proftpd project proftpd 1.2.5 • proftpd project proftpd 1.2.5 rc1 • proftpd project proftpd 1.2.5 rc2 • proftpd project proftpd 1.2.5 rc3 • proftpd project proftpd 1.2.6 • proftpd project proftpd 1.2.6 rc1 • proftpd project proftpd 1.2.6 rc2 • proftpd project proftpd 1.2.6 rc3 • proftpd project proftpd 1.2.7 • proftpd project proftpd 1.2.7 rc1 • proftpd project proftpd 1.2.7 rc2 • proftpd project proftpd 1.2.7 rc3 • proftpd project proftpd 1.2.8 • proftpd project proftpd 1.2.8 rc1 • proftpd project proftpd 1.2.8 rc2 • proftpd project proftpd 1.2.9 • proftpd project proftpd 1.2.9 rc1 • proftpd project proftpd 1.2.9 rc2 • proftpd project proftpd 1.2.9 rc3 • proftpd project proftpd 1.2.10 • proftpd project proftpd 1.2.10 rc1 • proftpd project proftpd 1.2.10 rc2 • proftpd project proftpd 1.2.10 rc3 • proftpd project proftpd 1.3.0 rc1

References