PT-2019-15798 · Proftpd+3 · Proftpd+3

Debrouxl · Published 2019-11-25 · Updated 2025-10-22 · CVE-2019-19270

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.7

Description An issue was discovered in the tls verify crl function, which prevents some valid Certificate Revocation Lists (CRLs) from being taken into account. This can allow clients whose certificates have been revoked to connect to the server.

Recommendations For ProFTPD versions prior to 1.3.7, update to version 1.3.7 or later to resolve the issue.

Exploit

Fix

DoS

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALT-PU-2020-2973

ALT-PU-2020-2992

ALT-PU-2021-2692

ALT-PU-2023-5874

ALT-PU-2024-13729

BDU:2025-13444

CVE-2019-19270

OPENSUSE-SU-2020:0031-1

OPENSUSE-SU-2020_0031-1

Affected Products

Alt Linux

Proftpd

Red Os

Suse

References · 31

• 🔥 https://github.com/ptef/CVE-2020-9273 · Exploit
• 🔥 https://github.com/KTN1990/CVE-2019-12815 · Exploit
• https://github.com/proftpd/proftpd/issues/859 · Patch
• https://osv.dev/vulnerability/CVE-2019-19270 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19270 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0031-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QR65XUHPCRU3NXTSFVF2J4GWRIHC7AHW · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13444 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-19270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19270 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-19270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19270 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19270 · Security Note