ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote at…

Exploit prediction (EPSS)

56.88% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

• EDB-23170 ProFTPd 1.2.7/1.2.8 - '.ASCII' File Transfer Buffer Overrun · dos · 2003-09-23
• EDB-110 ProFTPd 1.2.7 < 1.2.9rc2 - Remote Code Execution / Brute Force · remote · 2003-10-13
• EDB-107 ProFTPd 1.2.9 rc2 - '.ASCII' File Remote Code Execution (1) · remote · 2003-10-04

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• marc.info /?l=bugtraq&m=106606885611269&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
• xforce.iss.net /xforce/alerts/id/154 · third-party-advisory, x_refsource_ISS, x_transferred
• kb.cert.org /vuls/id/405348 · third-party-advisory, x_refsource_CERT-VN, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/12200 · vdb-entry, x_refsource_XF, x_transferred
• exploit-db.com /exploits/107/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• lists.grok.org.uk /pipermail/full-disclosure/2003-October/012072.html · mailing-list, x_refsource_FULLDISC, x_transferred
• secunia.com /advisories/9829 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• marc.info /?l=bugtraq&m=106441655617816&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2003:095 · vendor-advisory, x_refsource_MANDRAKE, x_transferred

Sources

• CVE List: CVE-2003-0831
• NVD: CVE-2003-0831

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.