ProFTPD vulnerabilities
1 known vulnerability in ProFTPD from ProFTPD Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
ProFTPD: Improper Link Resolution Before File Access
ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unr