CVE-2010-4652

The record

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.

Affected packages

Related vulnerabilities

• CVE-2024-48651 In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants… Also affects proftpd-dfsg
• CVE-2015-3306 The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to… Also affects proftpd-dfsg
• CVE-2011-4130 Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote… Also affects proftpd-dfsg
• CVE-2011-1137 Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows… Also affects proftpd-dfsg
• CVE-2010-4221 Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in… Also affects proftpd-dfsg
• CVE-2009-0543 ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL… Also affects proftpd-dfsg
• CVE-2009-0542 SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote… Also affects proftpd-dfsg
• CVE-2007-2165 The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication… Also affects proftpd-dfsg