Proftpd: >> Proftpd >> 1.2.10 Security Vulnerabilities
The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.
CVSS Score
4.0
EPSS Score
0.032
Published
2010-11-09
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
CVSS Score
5.0
EPSS Score
0.307
Published
2004-10-15
Page 3