high7.5
CVE-2001-0027
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to ga…
Impact
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proftpd Project | Proftpd | All versions |