PT-2009-6637 · Proftpd · Proftpd-Doc+6

Gat3Way · Published 1970-01-01 · Updated 2024-06-15 · CVE-2009-0542

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ProFTPD Server versions 1.3.1 through 1.3.2rc2 proftpd-doc (affected versions not specified) proftpd-mod-pgsql (affected versions not specified) proftpd-mod-mysql (affected versions not specified) proftpd (affected versions not specified) proftpd-mod-ldap (affected versions not specified) proftpd-basic (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod sql. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of the vulnerabilities can be carried out remotely.

Recommendations For ProFTPD Server versions 1.3.1 through 1.3.2rc2, consider disabling the mod sql module until a patch is available. For proftpd-doc, proftpd-mod-pgsql, proftpd-mod-mysql, proftpd, proftpd-mod-ldap, and proftpd-basic, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2015-00985

BDU:2015-00986

BDU:2015-02086

BDU:2015-02087

BDU:2015-02088

BDU:2015-02089

CVE-2009-0542

DSA-1727-1

DSA-1730-1

OPENSUSE-SU-2024:10048-1

Affected Products

Proftpd Server

Proftpd

Proftpd-Basic

Proftpd-Doc

Proftpd-Mod-Ldap

Proftpd-Mod-Mysql

Proftpd-Mod-Pgsql

References · 36

• 🔥 https://exploit-db.com/exploits/32798 · Exploit
• 🔥 https://exploit-db.com/exploits/8037 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0543 · Security Note
• http://security.gentoo.org/glsa/glsa-200903-27.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0542 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02088 · Security Note
• https://bdu.fstec.ru/vul/2015-02086 · Security Note
• https://bdu.fstec.ru/vul/2015-02087 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10048-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00986 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0542 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0542 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:061 · Vendor Advisory
• http://debian.org/security/2009/dsa-1730 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0542 · Vendor Advisory