CVE-2026-42167

Mô tả

Tham khảo

• proftpd.org/docs/RELEASE_NOTES-1.3.10rc1 · Release Notes
• ZeroPathAI/proftpd-CVE-2026-42167-poc · Exploit
• proftpd/proftpd · Exploit
• openwall.com/lists/oss-security/2026/05/01/4 · Mailing List
• zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce · Exploit
• openwall.com/lists/oss-security/2026/05/01/13 · Mailing List
• openwall.com/lists/oss-security/2026/05/01/4 · Mailing List

Lỗ hổng khác của proftpd

• CVE-2026-63091TRUNG BÌNH 6.5ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that al…
• CVE-2026-63090CAO 8.8ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low…
• CVE-2026-53994TRUNG BÌNH 6.5ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the a…
• CVE-2026-35025CAO 8.1ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Direc…
• CVE-2010-20103NGHIÊM TRỌNG 9.8A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The ba…