CVE-2001-0136

Published: Mar 12, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

Affected (4)

Products: Proftpd: Proftpd · Conectiva: Linux · Debian: Debian Linux · +1 more

Show all products

Proftpd: Proftpd · Conectiva: Linux · Debian: Debian Linux · Mandrakesoft: Mandrake Linux

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Proftpd Proftpd	Version 1.2.0 rc2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Conectiva Linux	All versions
Debian Debian Linux	Version 2.2
Mandrakesoft Mandrake Linux	Version 7.2

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (16)

http://archives.neohapsis.com/archives/bugtraq/2001-01/0122.html

Source: cve@mitre.org

ExploitVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-01/0132.html

Source: cve@mitre.org

Broken Link

http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html

Source: cve@mitre.org

Broken Link

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2001/dsa-029

Source: cve@mitre.org

Third Party Advisory

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/152206

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/5801

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://archives.neohapsis.com/archives/bugtraq/2001-01/0122.html