CVE-2026-42167

概要

参考情報

• proftpd.org/docs/RELEASE_NOTES-1.3.10rc1 · Release Notes
• ZeroPathAI/proftpd-CVE-2026-42167-poc · Exploit
• proftpd/proftpd · Exploit
• openwall.com/lists/oss-security/2026/05/01/4 · Mailing List
• zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce · Exploit
• openwall.com/lists/oss-security/2026/05/01/13 · Mailing List
• openwall.com/lists/oss-security/2026/05/01/4 · Mailing List

proftpd のその他の脆弱性

• CVE-2026-63091中 6.5ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that al…
• CVE-2026-63090高 8.8ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low…
• CVE-2026-53994中 6.5ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the a…
• CVE-2026-35025高 8.1ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Direc…
• CVE-2010-20103緊急 9.8A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The ba…