CVE-2011-1137

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
proftpdproftpd
𝑥
≤ 1.3.3
proftpdproftpd
1.2.0
proftpdproftpd
1.2.0:pre10
proftpdproftpd
1.2.0:pre9
proftpdproftpd
1.2.0:rc1
proftpdproftpd
1.2.0:rc2
proftpdproftpd
1.2.0:rc3
proftpdproftpd
1.2.1
proftpdproftpd
1.2.2
proftpdproftpd
1.2.2:rc1
proftpdproftpd
1.2.2:rc2
proftpdproftpd
1.2.2:rc3
proftpdproftpd
1.2.3
proftpdproftpd
1.2.4
proftpdproftpd
1.2.5
proftpdproftpd
1.2.5:rc1
proftpdproftpd
1.2.5:rc2
proftpdproftpd
1.2.5:rc3
proftpdproftpd
1.2.6
proftpdproftpd
1.2.6:rc1
proftpdproftpd
1.2.6:rc2
proftpdproftpd
1.2.7
proftpdproftpd
1.2.7:rc1
proftpdproftpd
1.2.7:rc2
proftpdproftpd
1.2.7:rc3
proftpdproftpd
1.2.8
proftpdproftpd
1.2.8:rc1
proftpdproftpd
1.2.8:rc2
proftpdproftpd
1.2.9
proftpdproftpd
1.2.9:rc1
proftpdproftpd
1.2.9:rc2
proftpdproftpd
1.2.9:rc3
proftpdproftpd
1.2.10
proftpdproftpd
1.2.10:rc1
proftpdproftpd
1.2.10:rc2
proftpdproftpd
1.2.10:rc3
proftpdproftpd
1.3.0
proftpdproftpd
1.3.0:a
proftpdproftpd
1.3.0:rc1
proftpdproftpd
1.3.0:rc2
proftpdproftpd
1.3.0:rc3
proftpdproftpd
1.3.0:rc4
proftpdproftpd
1.3.0:rc5
proftpdproftpd
1.3.1
proftpdproftpd
1.3.1:rc1
proftpdproftpd
1.3.1:rc2
proftpdproftpd
1.3.1:rc3
proftpdproftpd
1.3.2
proftpdproftpd
1.3.2:a
proftpdproftpd
1.3.2:b
proftpdproftpd
1.3.2:c
proftpdproftpd
1.3.2:d
proftpdproftpd
1.3.2:e
proftpdproftpd
1.3.2:rc1
proftpdproftpd
1.3.2:rc2
proftpdproftpd
1.3.2:rc3
proftpdproftpd
1.3.2:rc4
proftpdproftpd
1.3.3
proftpdproftpd
1.3.3:a
proftpdproftpd
1.3.3:b
proftpdproftpd
1.3.3:c
proftpdproftpd
1.3.3:rc1
proftpdproftpd
1.3.3:rc2
proftpdproftpd
1.3.3:rc3
proftpdproftpd
1.3.3:rc4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
proftpd-dfsg
bullseye
1.3.7a+dfsg-12+deb11u2
fixed
lenny
not-affected
bookworm
1.3.8+dfsg-4+deb12u3
fixed
trixie
1.3.8.b+dfsg-2
fixed
sid
1.3.8.b+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
proftpd-dfsg
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
ignored
hardy
ignored
dapper
dne
Common Weakness Enumeration
References