Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE…

Description

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

Scores

EPSS (exploitation in 30 days)

44.9% · top 1.2% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

• n/a
• CWE-401 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (8)

• MDKSA-2001:021 (opens in a new tab)vendor-advisoryx_refsource_MANDRAKEx_transferred
• CLA-2001:380 (opens in a new tab)vendor-advisoryx_refsource_CONECTIVAx_transferred
• proftpd-size-memory-leak(5801) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 20010109 Memory leakage in ProFTPd leads to remote DoS (SIZE FTP); (Exploit Code) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 20010110 Re: Memory leakage in ProFTPd leads to remote DoS (SIZE FTP); (Exploit Code) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 20010213 Trustix Security Advisory - proftpd, kernel (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 20001220 ProFTPD 1.2.0 Memory leakage - denial of service (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• DSA-029 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 8 Aug 2024, 04:06 UTC.