CVE-2001-1501: Medium severity Proftpd Project Proftpd vulnerability
Published Dec 31, 2001
·Updated
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "/..", (2) "/.", or (3) "../?/" sequences in the argument.
Affected Software
1 affected component
Proftpd Project Proftpd=1.2.1
Event History
Dec 31, 2001
CVE Published
05:00 AM
Jun 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1501?
CVE-2001-1501 is classified as a denial of service vulnerability.
2
How do I fix CVE-2001-1501?
To fix CVE-2001-1501, upgrade ProFTPD to version 1.2.1 or a later patched version.
3
What software is affected by CVE-2001-1501?
CVE-2001-1501 affects ProFTPD version 1.2.1 specifically.
4
What type of attack does CVE-2001-1501 enable?
CVE-2001-1501 enables an attacker to perform denial of service attacks through resource exhaustion.
5
Are there any known exploits for CVE-2001-1501?
Yes, there are known exploits which demonstrate the vulnerability through specific command patterns.