CVE-2001-0027: High severity Proftpd Project Proftpd vulnerability
Published Feb 2, 2001
·Updated
modsqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.
Affected Software
1 affected component
Proftpd Project Proftpd
Event History
Feb 2, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0027?
CVE-2001-0027 is considered a high severity vulnerability due to potential unauthorized access rights.
2
How do I fix CVE-2001-0027?
To fix CVE-2001-0027, update ProFTPD to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2001-0027?
All users of ProFTPD with the mod_sqlpw module enabled are affected by CVE-2001-0027.
4
What type of attack can exploit CVE-2001-0027?
CVE-2001-0027 can be exploited by authenticated attackers to gain unauthorized access to other user accounts.
5
When was CVE-2001-0027 discovered?
CVE-2001-0027 was discovered and publicly disclosed in December 2000.