CVE-2004-0432: High severity Proftpd Project Proftpd vulnerability
Published May 5, 2004
·Updated
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
Affected Software
11 affected components
Proftpd Project Proftpd=1.2.9
Trustix Secure Linux=2.0
gentoo Linux=1.4-rc1
gentoo Linux=1.4-rc3
gentoo Linux=0.5
gentoo Linux=1.1a
gentoo Linux=1.4
gentoo Linux=0.7
gentoo Linux=1.2
Trustix Secure Linux=2.1
gentoo Linux=1.4-rc2
Remediation
Patch Available
Event History
May 5, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0432?
CVE-2004-0432 has a moderate severity level due to its potential to allow unauthorized access to FTP clients.
2
How do I fix CVE-2004-0432?
To mitigate CVE-2004-0432, upgrade to a newer version of ProFTPD that addresses the issue.
3
What systems are affected by CVE-2004-0432?
CVE-2004-0432 affects ProFTPD version 1.2.9 as well as various versions of Gentoo Linux and Trustix Secure Linux.
4
Can CVE-2004-0432 lead to data breaches?
Yes, CVE-2004-0432 can lead to data breaches by allowing unauthorized FTP clients to access restricted resources.
5
Is CVE-2004-0432 a common vulnerability?
CVE-2004-0432 is considered a relatively common vulnerability due to the widespread use of ProFTPD in FTP services.