Threats tagged 'ghsa-wj68-6748-262r'

ProFTPD versions before 1.3.9e and 1.3.10rc5 have a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap. This flaw allows remote attackers to send FTP command arguments longer than 1024 bytes, potentially overwriting static buffers and corrupting session memory, which can crash the session. The vulnerability can be exploited without authentication if pre-login commands are rewritten.