Description
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Exploits (3)
References (9)
Scores
EPSS
0.4088
EPSS Percentile
97.4%
Details
CWE
CWE-119
Status
published
Products (9)
proftpd_project/proftpd
1.2.7
proftpd_project/proftpd
1.2.7_rc1
proftpd_project/proftpd
1.2.7_rc2
proftpd_project/proftpd
1.2.7_rc3
proftpd_project/proftpd
1.2.8
proftpd_project/proftpd
1.2.8_rc1
proftpd_project/proftpd
1.2.8_rc2
proftpd_project/proftpd
1.2.9_rc1
proftpd_project/proftpd
1.2.9_rc2
Published
Nov 17, 2003
Tracked Since
Feb 18, 2026