CVE-2004-0432

Published 05 May 2004 · Updated 08 Aug 2024

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 9.2%

exploitation probability

9.2%top 5% of all CVEs

observed exploitation

nono source reports it

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.

Affected products

n/a · n/a

References

http://bugs.proftpd.org/show_bug.cgi?id=2267 http://marc.info/?l=bugtraq&m=108335030208523&w=2 http://marc.info/?l=bugtraq&m=108335051011341&w=2 http://secunia.com/advisories/11527 https://exchange.xforce.ibmcloud.com/vulnerabilities/16038 http://www.mandriva.com/security/advisories?name=MDKSA-2004:041 http://www.securityfocus.com/bid/10252