Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-4130

high · 9

Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.

9
CVSS
12.6%
EPSS (exploit prob.)
96th
EPSS percentile
2011-12-06
Published

AV:N/AC:L/Au:S/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
proftpdproftpd<= 1.3.3
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.0
proftpdproftpd1.2.1
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.2
proftpdproftpd1.2.3
proftpdproftpd1.2.4
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.5
proftpdproftpd1.2.6
proftpdproftpd1.2.6
proftpdproftpd1.2.6
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.7
proftpdproftpd1.2.8
proftpdproftpd1.2.8
proftpdproftpd1.2.8
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.9
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.2.10
proftpdproftpd1.3.0
proftpdproftpd1.3.0
proftpdproftpd1.3.0
proftpdproftpd1.3.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-4130