CVE-2001-0027

No fix known EPSS 6%

mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.

Published 2001-02-02 · CVE record · OSV

Products: proftpd_project proftpd