ID CVE-2001-0136
Summary Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
References
Vulnerable Configurations
  • cpe:2.3:a:proftpd:proftpd:1.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:proftpd:proftpd:1.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
    cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
  • cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
    cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 26-01-2024 - 18:53)
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bugtraq
  • 20001220 ProFTPD 1.2.0 Memory leakage - denial of service
  • 20010109 Memory leakage in ProFTPd leads to remote DoS (SIZE FTP); (Exploit Code)
  • 20010110 Re: Memory leakage in ProFTPd leads to remote DoS (SIZE FTP); (Exploit Code)
  • 20010213 Trustix Security Advisory - proftpd, kernel
conectiva CLA-2001:380
debian DSA-029
mandrake MDKSA-2001:021
xf proftpd-size-memory-leak(5801)
Last major update 26-01-2024 - 18:53
Published 12-03-2001 - 05:00
Last modified 26-01-2024 - 18:53
Back to Top