ProFTPD Username Variable Substitution SQL Injection
high Nessus Plugin ID 35690
Language:
Synopsis
The remote FTP server is affected by a SQL injection vulnerability.Description
The remote host is using ProFTPD, a free FTP server for Unix and Linux.The variable substitution feature in the version of ProFTPD running on the remote host can be abused to conduct a SQL injection attack. For example, a remote attacker can bypass authentication using a specially crafted username containing a percent sign character ('%'), a single quote, and SQL code.
Solution
Upgrade to ProFTPD 1.3.2rc3 or later.See Also
http://bugs.proftpd.org/show_bug.cgi?id=3124
http://comments.gmane.org/gmane.comp.security.oss.general/1489
http://bugs.proftpd.org/show_bug.cgi?id=3180
https://www.securityfocus.com/archive/1/500823/30/0/threaded
Plugin Details
Severity: High
ID: 35690
File Name: proftpd_user_sql_injection.nasl
Version: 1.19
Type: remote
Family: FTP
Published: 2/17/2009
Updated: 11/15/2018
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:F/RL:OF/RC:C
Vulnerability Information
CPE: cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
Excluded KB Items: global_settings/supplied_logins_only
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Exploitable With
CANVAS (D2ExploitPack)
Reference Information
CVE: CVE-2009-0542
BID: 33722