| Package | Affected versions | Patched versions |
|---|---|---|
| proftpd | ≥ 1.2.0, ≤ 1.2.10 |
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free