CVE-2005-2390
Fixed in a distro release EPSS 9%
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
Products: proftpd_project proftpd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | proftpd | 1.2.10-15sarge1 |