Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1137

medium · 5

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.

5
CVSS
28.1%
EPSS (exploit prob.)
98th
EPSS percentile
2011-03-11
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
proftpdproftpd<= 1.3.3
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.1
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.3
proftpdproftpd1.2.4
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.6
proftpdproftpd1.2.6
proftpdproftpd1.2.6
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.8
proftpdproftpd1.2.8
proftpdproftpd1.2.8
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.3.0
proftpdproftpd1.3.0
proftpdproftpd1.3.0
proftpdproftpd1.3.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1137