CVE-2021-47865

ProFTPD 1.3.7a - Remote Denial of Service

CVSS 8.7 HIGHEPSS 0.5%CWE-770

ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Productos afectados

ProFTPD · ProFTPD

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/proftpd/proftpd/issues/1298 https://www.exploit-db.com/exploits/49697 https://www.vulncheck.com/advisories/proftpd-a-remote-denial-of-service http://www.proftpd.org/