Sploitus

41 exploited vulnerabilities in Proftpd

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Proftpd, Suse, Postgresql, Beroftpd, Wu Ftpd
With known exploits
41
Affected Proftpd versions
= 1.3.5, 1.3.2, 1.3.3, 1.3.7, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.2.10, 1.3.0, 1.3.1, 1.3.9b, 1.3.4
Affected Proftpd Project Proftpd versions
≤ 1.3.0, 1.2.9_rc1, 1.2_pre1, 1.2_pre2, 1.2_pre3, 1.2_pre4, 1.2_pre5, 1.2.7, 1.2.7_rc1, 1.2.7_rc2, 1.2.7_rc3, 1.2.8, 1.2.8_rc1, 1.2.8_rc2, 1.2.9_rc2, 1.3.1, 1.3.2, 1.3.2_rc2, 1.3.0a, 1.2.1
Affected Washington University Wu-ftpd versions
= 2.4.2_beta18, 2.4.2_beta18_vr9, 2.4.2_beta1, 2.4.2_beta18_vr4, 2.4.2_beta18_vr5, 2.4.2_beta18_vr6, 2.4.2_beta18_vr7, 2.4.2_beta18_vr8, 2.4.2_beta18_vr10, 2.4.2_beta18_vr11, 2.4.2_beta18_vr12, 2.4.2_beta18_vr13, 2.4.2_beta18_vr14, 2.4.2_beta18_vr15, 2.4.2_vr16, 2.4.2_vr17, 2.5, 2.6
Affected Gnu Glibc versions
= 1.00, 1.01, 1.02, 1.03, 1.04, 1.05, 1.06, 1.07, 1.08, 1.09, 1.09.1, 2.1, 2.1.1, 2.1.1.6, 2.1.2, 2.1.3, 2.1.3.10, 2.1.9, 2.10, 2.10.1, 2.10.2, 2.11, 2.11.1, 2.11.2, 2.11.3, 2.12.0, 2.12.1, 2.12.2
Affected Openbsd Ftpd versions
= 5.51, 5.60

Vulnerabilities with exploits

Highest CVSS first — 20 of these already have exploit code on Sploitus

CVE-2019-12815
CVSS 10.0 CRITICAL 2018-01-02FIX AVAILABLE
CVE-2016-3125
CVSS 10.0 HIGH 2016-03-31FIX AVAILABLE
CVE-2015-3306 23 exploits
CVSS 10.0 HIGH 2015-05-18FIX AVAILABLE
cybersecurity-exam-reportExploit for Improper Access Control in Proftpd
CVE-2010-4221 10 exploits
CVSS 10.0 HIGH 2010-11-09FIX AVAILABLE
ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (FreeBSD)ProFTPD Telnet IAC buffer overflow
CVE-2006-6170
CVSS 10.0 HIGH 2006-11-08
CVE-2006-5815 5 exploits
CVSS 10.0 HIGH 2006-11-08
ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)
CVE-2003-0500 1 exploit
CVSS 10.0 HIGH 2003-07-04FIX AVAILABLE
ProFTPd 1.2.9 RC1 - 'mod_sql' SQL Injection
CVE-1999-0911 2 exploits
CVSS 10.0 HIGH 1999-08-27FIX AVAILABLE
ProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (2)ProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (1)
CVE-1999-0368 3 exploits
CVSS 10.0 HIGH 1999-02-09FIX AVAILABLE
Exploit for CVE-1999-0368WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
CVE-2010-20103
CVSS 9.8 CRITICAL 2025-08-20
CVE-2020-9273 1 exploit
CVSS 9.0 HIGH 2018-01-02
Exploit for Use After Free in Proftpd
CVE-2011-4130 3 exploits
CVSS 9.0 HIGH 2009-02-12FIX AVAILABLE
Exploit for CVE-1999-0078ProFTPD响应池释放后重用代码执行漏洞
CVE-2003-0831 3 exploits
CVSS 9.0 HIGH 2003-09-25
ProFTPd 1.2.7 < 1.2.9rc2 - Remote Code Execution / Brute ForceProFTPd 1.2.9 rc2 - '.ASCII' File Remote Code Execution (1)
CVE-2026-63090
CVSS 8.8 HIGH 2026-07-20FIX AVAILABLE
CVE-2021-47865
CVSS 8.7 HIGH 2026-01-21
CVE-2026-35025
CVSS 8.6 HIGH 2026-06-24
CVE-2026-44331
CVSS 8.1 HIGH 2026-05-05FIX AVAILABLE
CVE-2026-42167 6 exploits
CVSS 8.1 HIGH 2026-04-27FIX AVAILABLE
Exploit for CVE-2026-42167Exploit for CVE-2026-42167
CVE-2023-51713
CVSS 7.8 HIGH 2023-12-21FIX AVAILABLE
CVE-2021-46854
CVSS 7.8 HIGH 2022-11-23FIX AVAILABLE
CVE-2019-19270
CVSS 7.8 HIGH 2019-11-25FIX AVAILABLE
CVE-2019-18217
CVSS 7.8 HIGH 2015-05-18FIX AVAILABLE
CVE-2024-48651
CVSS 7.5 HIGH 2024-09-22FIX AVAILABLE
CVE-2009-0542 3 exploits
CVSS 7.5 HIGH 1970-01-01
DSquare Exploit Pack: D2SEC_PROFTPD_MODSQLProFTPd - 'mod_mysql' Authentication Bypass
CVE-2005-0484
CVSS 7.5 HIGH 2005-02-19FIX AVAILABLE
CVE-2001-0027
CVSS 7.5 HIGH 2001-02-02
CVE-2004-0346
CVSS 7.2 HIGH 2004-03-18FIX AVAILABLE
CVE-2026-63091
CVSS 7.1 HIGH 2026-07-20FIX AVAILABLE
CVE-2010-3867 3 exploits
CVSS 7.1 HIGH 2010-11-09FIX AVAILABLE
metasploitable-vulnerability-mapping-with-nmapProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow
CVE-2010-4652
CVSS 6.8 MEDIUM 2011-02-02FIX AVAILABLE
CVE-2008-4242
CVSS 6.8 MEDIUM 1970-01-01
CVE-2006-6563 4 exploits
CVSS 6.6 MEDIUM 2006-12-15FIX AVAILABLE
ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (2)ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (1)
CVE-2017-7418
CVSS 5.5 MEDIUM 2017-04-04FIX AVAILABLE
CVE-2013-4359 1 exploit
CVSS 5.0 MEDIUM 2013-09-30
ProFTPD &quot;mod_sftp/mod_sftp_pam&quot;整数溢出拒绝服务漏洞
CVE-2010-4052 11 exploits
CVSS 5.0 MEDIUM 2011-01-13FIX AVAILABLE
FreeBSD 9.1 ftpd Remote Denial of ServiceGNU libc/regcomp(3) Multiple Vulnerabilities
CVE-2011-1137 1 exploit
CVSS 5.0 MEDIUM 2009-02-12FIX AVAILABLE
ProFTPd - 'mod_sftp' Integer Overflow Denial of Service (PoC)
CVE-2004-1602 1 exploit
CVSS 5.0 MEDIUM 2004-10-15FIX AVAILABLE
ProFTPd 1.2.10 - Remote Users Enumeration
CVE-2001-1501 2 exploits
CVSS 5.0 MEDIUM 2001-12-31FIX AVAILABLE
Exploit for CVE-1999-0368WU-FTPD 2.4/2.5/2.6 / Trolltech ftpd 1.2 / ProFTPd 1.2 / BeroFTPD 1.3.4 FTP - glob Expansion
CVE-2001-0136 3 exploits
CVSS 5.0 MEDIUM 2001-03-12FIX AVAILABLE
ProFTPd 1.2.0 pre10 - Remote Denial of ServiceProFTPd 1.2.0 rc2 - Memory Leakage
CVE-2000-0574 1 exploit
CVSS 5.0 MEDIUM 2000-07-07
OpenBSD - 'ftp' Local Overflow