CVEvulnerability
CVE-2011-4130
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
Affected configurations
• proftpd proftpd (<= 1.3.3)
• proftpd proftpd 1.2.0
• proftpd proftpd 1.2.1
• proftpd proftpd 1.2.2
• proftpd proftpd 1.2.3
• proftpd proftpd 1.2.4
• proftpd proftpd 1.2.5
• proftpd proftpd 1.2.6
• proftpd proftpd 1.2.7
• proftpd proftpd 1.2.8
• proftpd proftpd 1.2.9
• proftpd proftpd 1.2.10
• proftpd proftpd 1.3.0
• proftpd proftpd 1.3.1
• proftpd proftpd 1.3.2
• proftpd proftpd 1.3.3
Related
Weakness · not in database (1)
References
- http://bugs.proftpd.org/show_bug.cgi?id=3711 Exploit, Patch
- http://www.proftpd.org/docs/NEWS-1.3.3g www.proftpd.org
- http://www.securityfocus.com/bid/50631 www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-328/ www.zerodayinitiative.com
- http://bugs.proftpd.org/show_bug.cgi?id=3711 Exploit, Patch
- http://www.proftpd.org/docs/NEWS-1.3.3g www.proftpd.org
- http://www.securityfocus.com/bid/50631 www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-328/ www.zerodayinitiative.com