CVE-2005-2390
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/07/2005
Last modified:
18/10/2016
Description
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
Impact
Base Score 2.0
6.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:proftpd_project:proftpd:1.2.0_pre9:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.0_pre10:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc1:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc2:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc3:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.1_final:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc1:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc2:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc3:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:proftpd_project:proftpd:1.2.5_rc1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page