CVE-2010-4652

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to…

published February 2, 2011

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11244 · 95.9th percentile
Published
2011-02-02T00:00Z
EPSS history
Timeline
  • 02 FEB 00:00Z
    Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to…
    cvelistv5