VULNERABILITY INTELLIGENCE
CVE-2003-0831
CVSS score9 HIGH
EPSS probability58.36%
CISA KEVNot currently listed
Published2003-11-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer