Integer Overflow Vulnerability in ProFTPD's SFTP Module Impacting Remote Servers

CVE-2011-1137

What is CVE-2011-1137?

An integer overflow vulnerability exists in the SFTP module of ProFTPD versions prior to 1.3.3d. This flaw enables remote attackers to exploit a malformed SSH message, potentially resulting in excessive memory consumption. Successfully leveraging this vulnerability can lead to severe impacts, including denial of service attacks where the server may become unresponsive or suffer from an out-of-memory (OOM) condition.

References