Multiple format string vulnerabilities in ProFTPD by ProFTPD Project

CVE-2005-2390

What is CVE-2005-2390?

ProFTPD versions prior to 1.3.0rc2 are susceptible to multiple format string vulnerabilities that can be exploited by attackers. These vulnerabilities can lead to a denial of service or unauthorized access to sensitive information. Exploitation occurs through specific inputs to the shutdown message during ftpshut operations or by manipulating the SQLShowInfo directive in mod_sql. It is crucial to update to a secure version to safeguard against these risks.

References