CVE-2011-4130

Published Dec 6, 2011 CVSS 2.0 · 9.0 Critical EPSS 12.6% KEV · Not listed
Description
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2346-1 proftpd-dfsg security update
EUVD EUVD EUVD-2011-4078 Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:01 AM
Reserved
Oct 18, 2011, 12:00 AM
Status
Modified
Published
Dec 6, 2011, 11:55 AM
Modified
Jun 16, 2026, 11:34 PM