CVE-2023-51713: proftpd · n/a
Affects proftpdSource CVE Database V5
Exposed hosts seen by OffSeq Mirage · public detection template (Nuclei).
Data as of 25 Oct 2026, 22:43 UTC
Rated Medium by the CNA (mitre) · No CVSS score from NVD or the CNA
- EPSS
- 4.2% chance of exploitation in 30 days – higher than 90% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 22 Dec 2023
Detectable: evidence found.
nuclei template: ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: evidence found.
6 exposed hosts found; no attack traffic recorded
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), OffSeq Mirage (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
GitHubproftpd/proftpdpkg:github/proftpd/proftpdOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Since the vulnerability affects versions before 1.3.8a and the affected version listed is 1.3.8, it is implied that upgrading to 1.3.8a or later would remediate the issue. Users should verify availability of official fixes from the ProFTPD vendor and apply them accordingly.
Description
CVE-2023-51713 is a vulnerability in ProFTPD before version 1.3.8a where the function make_ftp_cmd in main.c has a one-byte out-of-bounds read due to improper handling of quote and backslash characters. This flaw can cause the ProFTPD daemon to crash.