CVE-2021-47865

ProFTPD 1.3.7a - Remote Denial of Service

CVSS 8.7 HIGHEPSS 0.5%CWE-770

ProFTPD 1.3.7a contains a denial of service vulnerability that allows attackers to overwhelm the server by creating multiple simultaneous FTP connections. Attackers can repeatedly establish connections using threading to exhaust server connection limits and block legitimate user access.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Produtos afetados

ProFTPD · ProFTPD

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/proftpd/proftpd/issues/1298 https://www.exploit-db.com/exploits/49697 https://www.vulncheck.com/advisories/proftpd-a-remote-denial-of-service http://www.proftpd.org/