high7.5
CVE-2023-51713
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
Impact
make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proftpd | Proftpd | before 1.3.8a |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/proftpd/proftpd/blob/1.3.8/NEWS
- https://github.com/proftpd/proftpd/issues/1683
- https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554
- https://github.com/proftpd/proftpd/blob/1.3.8/NEWS
- https://github.com/proftpd/proftpd/issues/1683
- https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554
- https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html