Skip to content
Threat Feed
Subscribe

Product

ProFTPD Before 1.3.10rc3

1 brief RSS
high advisory

ProFTPD mod_sftp Heap Buffer Overflow Leads to Arbitrary Code Execution

A heap-based buffer overflow vulnerability exists in the mod_sftp module of ProFTPD versions prior to 1.3.9c and 1.3.10rc3, allowing authenticated low-privilege attackers to achieve arbitrary code execution by sending specially crafted SFTP packet fragments exceeding 16 KB, corrupting memory and redirecting function calls.

ProFTPD before 1.3.9c +1 vulnerability heap-overflow rce sftp
1t 1c