Access Control Bypass in ProFTPD by The ProFTPD Project
CVE-2004-0432

Currently unrated

Key Information:

Vendor: Proftpd Project
Status: Proftpd
Vendor: CVE Published:; 18 August 2004

🔔 Create Proftpd Project Vulnerability Alert

What is CVE-2004-0432?

The ProFTPD 1.2.9 version incorrectly processes the Allow and Deny directives associated with CIDR-based Access Control Lists (ACLs). This misconfiguration leads to a scenario where FTP clients may circumvent the established restrictions, effectively granting them unauthorized access to files and services that should otherwise be protected. This vulnerability emphasizes the importance of strict access control configurations in FTP servers to safeguard sensitive data from potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch