CVE-2010-4652: Buffer Overflow
A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the modsql module was enabled. A remote, unauthenticated attacker could use this flaw to cause proftpd daemon to crash or, potentially, to execute arbitrary code with the privileges of the user running 'proftpd' via a specially-crafted username, provided in the authentication dialog.
Upstream bug report: [1] http://bugs.proftpd.org/showbug.cgi?id=3536
References: [2] http://www.securityfocus.com/bid/44933 [3] http://phrack.org/issues.html?issue=67&id=7#article [4] http://bugs.gentoo.org/showbug.cgi?id=348998 [5] http://proftpd.org/docs/RELEASENOTES-1.3.3d (ProFTPD v1.3.3d release notes)
CVE identifier: [6] http://www.openwall.com/lists/oss-security/2011/01/14/6
Other sources
Heap-based buffer overflow in the sqlpreparewhere function (contrib/modsql.c) in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4652?
CVE-2010-4652 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2010-4652?
To fix CVE-2010-4652, update ProFTPD to version 1.3.4 or later, which contains the necessary security patches.
What versions of ProFTPD are affected by CVE-2010-4652?
CVE-2010-4652 affects ProFTPD versions up to 1.3.3 and several earlier versions including 1.2.0 through 1.2.10.
Can CVE-2010-4652 be exploited remotely?
Yes, CVE-2010-4652 can be exploited remotely by an unauthenticated attacker without any prior access.
What type of vulnerability is CVE-2010-4652?
CVE-2010-4652 is a heap-based buffer overflow vulnerability involving SQL query handling in ProFTPD's mod_sql module.