Total vulnerabilities in the database
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
| Software | From | Fixed in |
|---|---|---|
| proftpd_project / proftpd | 1.2 | 1.2.x |