CVE-2001-0136: Medium severity ProFTPD ProFTPD vulnerability

Published Mar 12, 2001
·
Updated

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

Affected Software

4 affected components
ProFTPD ProFTPD=1.2.0-rc2
Conectiva Linux
Debian Debian Linux=2.2
Mandrakesoft Mandrake Linux=7.2

Event History

Mar 12, 2001
CVE Published
via NVD·05:00 AM
Sep 18, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2001-0136?

CVE-2001-0136 is considered a medium severity vulnerability as it can lead to a denial of service due to memory leak issues.

2

How do I fix CVE-2001-0136?

To fix CVE-2001-0136, upgrade ProFTPd to a version later than 1.2.0rc2 where this vulnerability has been addressed.

3

What systems are affected by CVE-2001-0136?

CVE-2001-0136 affects ProFTPd version 1.2.0rc2 and potentially systems running Conectiva Linux, Debian Linux 2.2, and Mandrake Linux 7.2.

4

What type of attack can be executed with CVE-2001-0136?

Attackers can execute a denial of service attack by sending a series of USER commands to exploit the memory leak in CVE-2001-0136.

5

Is CVE-2001-0136 still relevant today?

While CVE-2001-0136 is an older vulnerability, it is still relevant for legacy systems that run the affected versions of ProFTPd.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203