Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2010-4221

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.

  • Published: Nov 9, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-4221
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
proftpd / proftpd 1.3.3-b 1.3.3-b.x
proftpd / proftpd 1.3.3-rc4 1.3.3-rc4.x
proftpd / proftpd 1.3.2-d 1.3.2-d.x
proftpd / proftpd 1.3.2-a 1.3.2-a.x
proftpd / proftpd 1.3.3-rc2 1.3.3-rc2.x
proftpd / proftpd 1.3.2-c 1.3.2-c.x
proftpd / proftpd 1.3.2-e 1.3.2-e.x
proftpd / proftpd 1.3.2 1.3.2.x
proftpd / proftpd 1.3.3-rc3 1.3.3-rc3.x
proftpd / proftpd 1.3.3-a 1.3.3-a.x
proftpd / proftpd 1.3.2-rc3 1.3.2-rc3.x
proftpd / proftpd 1.3.2-b 1.3.2-b.x
proftpd / proftpd 1.3.2-rc4 1.3.2-rc4.x
proftpd / proftpd 1.3.3 1.3.3.x
proftpd / proftpd 1.3.3-rc1 1.3.3-rc1.x