CVE-2011-1137
MEDIUM 5.0EPSS 28.1%
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 28.07% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2011-03-11
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.c?r1=1.14…
- http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.h?r1=1.3&…
- http://secunia.com/advisories/43234
- http://secunia.com/advisories/43635
- http://www.vupen.com/english/advisories/2011/0617
- http://bugs.proftpd.org/show_bug.cgi?id=3586
- http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/mod_sftp.c?r1=1…
- https://bugzilla.redhat.com/show_bug.cgi?id=681718
- http://www.securityfocus.com/bid/46183