CVE-2010-4652

Published: Feb 2, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.

Affected (64)

Products: Proftpd: Proftpd

Proftpd

1 product

Proftpd

Configuration A

64 vulnerable

Vulnerable Software	Affected Versions
Proftpd Proftpd	Up to 1.3.3
Proftpd Proftpd	Version 1.2.0
Proftpd Proftpd	Version 1.2.0 pre10
Proftpd Proftpd	Version 1.2.0 pre9
Proftpd Proftpd	Version 1.2.0 rc1
Proftpd Proftpd	Version 1.2.0 rc2
Proftpd Proftpd	Version 1.2.0 rc3
Proftpd Proftpd	Version 1.2.10
Proftpd Proftpd	Version 1.2.10 rc1
Proftpd Proftpd	Version 1.2.10 rc2
Proftpd Proftpd	Version 1.2.10 rc3
Proftpd Proftpd	Version 1.2.1
Proftpd Proftpd	Version 1.2.2
Proftpd Proftpd	Version 1.2.2 rc1
Proftpd Proftpd	Version 1.2.2 rc2
Proftpd Proftpd	Version 1.2.2 rc3
Proftpd Proftpd	Version 1.2.3
Proftpd Proftpd	Version 1.2.4
Proftpd Proftpd	Version 1.2.5
Proftpd Proftpd	Version 1.2.5 rc1
Proftpd Proftpd	Version 1.2.5 rc2
Proftpd Proftpd	Version 1.2.5 rc3
Proftpd Proftpd	Version 1.2.6
Proftpd Proftpd	Version 1.2.6 rc1
Proftpd Proftpd	Version 1.2.6 rc2
Proftpd Proftpd	Version 1.2.7
Proftpd Proftpd	Version 1.2.7 rc1
Proftpd Proftpd	Version 1.2.7 rc2
Proftpd Proftpd	Version 1.2.7 rc3
Proftpd Proftpd	Version 1.2.8
Proftpd Proftpd	Version 1.2.8 rc1
Proftpd Proftpd	Version 1.2.8 rc2
Proftpd Proftpd	Version 1.2.9
Proftpd Proftpd	Version 1.2.9 rc1
Proftpd Proftpd	Version 1.2.9 rc2
Proftpd Proftpd	Version 1.2.9 rc3
Proftpd Proftpd	Version 1.3.0
Proftpd Proftpd	Version 1.3.0 a
Proftpd Proftpd	Version 1.3.0 rc1
Proftpd Proftpd	Version 1.3.0 rc2
Proftpd Proftpd	Version 1.3.0 rc3
Proftpd Proftpd	Version 1.3.0 rc4
Proftpd Proftpd	Version 1.3.0 rc5
Proftpd Proftpd	Version 1.3.1
Proftpd Proftpd	Version 1.3.1 rc1
Proftpd Proftpd	Version 1.3.1 rc2
Proftpd Proftpd	Version 1.3.1 rc3
Proftpd Proftpd	Version 1.3.2
Proftpd Proftpd	Version 1.3.2 a
Proftpd Proftpd	Version 1.3.2 b
Proftpd Proftpd	Version 1.3.2 c
Proftpd Proftpd	Version 1.3.2 d
Proftpd Proftpd	Version 1.3.2 e
Proftpd Proftpd	Version 1.3.2 rc1
Proftpd Proftpd	Version 1.3.2 rc2
Proftpd Proftpd	Version 1.3.2 rc3
Proftpd Proftpd	Version 1.3.2 rc4
Proftpd Proftpd	Version 1.3.3
Proftpd Proftpd	Version 1.3.3 a
Proftpd Proftpd	Version 1.3.3 b
Proftpd Proftpd	Version 1.3.3 rc1
Proftpd Proftpd	Version 1.3.3 rc2
Proftpd Proftpd	Version 1.3.3 rc3
Proftpd Proftpd	Version 1.3.3 rc4