Access Control Bypass in ProFTPD by The ProFTPD Project

CVE-2004-0432

What is CVE-2004-0432?

The ProFTPD 1.2.9 version incorrectly processes the Allow and Deny directives associated with CIDR-based Access Control Lists (ACLs). This misconfiguration leads to a scenario where FTP clients may circumvent the established restrictions, effectively granting them unauthorized access to files and services that should otherwise be protected. This vulnerability emphasizes the importance of strict access control configurations in FTP servers to safeguard sensitive data from potential exploitation.

References