Back to Database
Status published
Medium
CVE-2005-2390
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers...
Vulnerability Description
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2390
Credits & Attribution
No credits recorded in the NVD database.
References
More from proftpd project
View All →CVE-2009-0542
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows...
High
7.5
CVE-2008-4242
ProFTPD 1.3.1 interprets long commands from an FTP client as...
Medium
6.8
CVE-2007-2165
The Auth API in ProFTPD before 20070417, when multiple simultaneous...
Medium
5.1
CVE-2006-6563
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in...
Medium
6.6
CVE-2006-6171
ProFTPD 1.3.0a and earlier does not properly set the buffer...
High
7.5
Affected Vendor
proftpd project
View all reports →Affected Software
proftpd
Vulnerable Versions:
1.2.0_pre9, 1.2.0_pre10, 1.2.0_rc1, 1.2.0_rc2, 1.2.0_rc3, 1.2.1, 1.2.1_final, 1.2.2, 1.2.2_rc1, 1.2.2_rc2, 1.2.2_rc3, 1.2.3, 1.2.4, 1.2.5, 1.2.5_rc1, 1.2.5_rc2, 1.2.5_rc3, 1.2.6, 1.2.6_rc1, 1.2.6_rc2, 1.2.6_rc3, 1.2.7, 1.2.7_rc1, 1.2.7_rc2, 1.2.7_rc3, 1.2.8, 1.2.8_rc1, 1.2.8_rc2, 1.2.9, 1.2.9_rc1, 1.2.9_rc2, 1.2.9_rc3, 1.2.10, 1.2.10_rc1, 1.2.10_rc2, 1.2.10_rc3, 1.3.0_rc1
Timeline
Official Publish:
July 27th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.