CVE-2001-1501 - CVE House
Back to Database
Status published Medium CVE-2001-1501

The glob functionality in ProFTPD 1.2.1, and possibly other versions...

Vulnerability Description

The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1501

Credits & Attribution

No credits recorded in the NVD database.

References

More from proftpd project

View All →
CVE-2009-0542
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows...
High 7.5
CVE-2008-4242
ProFTPD 1.3.1 interprets long commands from an FTP client as...
Medium 6.8
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous...
Medium 5.1
CVE-2006-6563
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in...
Medium 6.6
CVE-2006-6171
ProFTPD 1.3.0a and earlier does not properly set the buffer...
High 7.5

Affected Vendor

proftpd project

View all reports →

Affected Software

proftpd
Vulnerable Versions:
1.2.1

Timeline

Official Publish: June 21st, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.