CVE Tools
Track your stack

Proftpd-project

15 CVEs tracked since 1999. Since Sep 1999, none of them reached CISA KEV.

Proftpd-project CVEs per month

Sep 1999 to Dec 2006. Point at a month, or focus the strip and use the arrow keys.
Proftpd-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
1999-0910
1999-10null or fewer
1999-11null or fewer
1999-12null or fewer
2000-01null or fewer
2000-0210
2000-03null or fewer
2000-04null or fewer
2000-05null or fewer
2000-06null or fewer
2000-07null or fewer
2000-08null or fewer
2000-09null or fewer
2000-10null or fewer
2000-11null or fewer
2000-12null or fewer
2001-01null or fewer
2001-0210
2001-03null or fewer
2001-04null or fewer
2001-0510
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-0910
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-02null or fewer
2002-03null or fewer
2002-04null or fewer
2002-05null or fewer
2002-06null or fewer
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-0710
2003-08null or fewer
2003-0910
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-0510
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-02null or fewer
2005-03null or fewer
2005-04null or fewer
2005-05null or fewer
2005-0620
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-1130
2006-1220

Products

The products that kept showing up in Proftpd-project's monthly top three, with their CVEs summed over those months.

  1. Proftpd1511 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Proftpd-project.

  1. CVE-2026-53994ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation7.5
  2. CVE-2026-35025ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR8.1
  3. CVE-2010-20103ProFTPD 1.3.3c Backdoor Command Execution9.8
  4. CVE-2009-0542SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" ...7.5
  5. CVE-2008-4242ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands...6.8
  6. CVE-2007-2165The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that...5.1
  7. CVE-2005-4816Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.7.5
  8. CVE-2006-6563Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen le...6.6
  9. CVE-2006-6170Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code vi...7.5
  10. CVE-2006-6171ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in Novemb...7.5
  11. CVE-2006-5815Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demons...10.0
  12. CVE-2005-2390Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ft...6.4
  13. CVE-2001-1501The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard an...5.0
  14. CVE-2001-1500ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorre...7.5
  15. CVE-2004-0432ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.7.5

The record

Peak rank
#40 in Nov 2006
Busiest month shown
Nov 2006, 3 CVEs
Months with a KEV entry
0 since Sep 1999
Monthly snapshots
11 since 1999
Proftpd-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store