CVE-2001-1500

Published: Dec 31, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged.

Affected (17)

Products: Proftpd Project: Proftpd

Proftpd Project

1 product

Proftpd

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Proftpd Project Proftpd	Version 1.2.0_rc3
Proftpd Project Proftpd	Version 1.2.1
Proftpd Project Proftpd	Version 1.2.2
Proftpd Project Proftpd	Version 1.2.2_rc1
Proftpd Project Proftpd	Version 1.2.2_rc2
Proftpd Project Proftpd	Version 1.2
Proftpd Project Proftpd	Version 1.2_pre10
Proftpd Project Proftpd	Version 1.2_pre11
Proftpd Project Proftpd	Version 1.2_pre1
Proftpd Project Proftpd	Version 1.2_pre2
Proftpd Project Proftpd	Version 1.2_pre3
Proftpd Project Proftpd	Version 1.2_pre4
Proftpd Project Proftpd	Version 1.2_pre5
Proftpd Project Proftpd	Version 1.2_pre6
Proftpd Project Proftpd	Version 1.2_pre7
Proftpd Project Proftpd	Version 1.2_pre8
Proftpd Project Proftpd	Version 1.2_pre9