CVE-2023-51713 Information

Share on:

Dec 22, 2023 cve

Description

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read and daemon crash because of mishandling of quote/backslash semantics.

Reference

https://github.com/proftpd/proftpd/issues/1683 https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554 https://github.com/proftpd/proftpd/blob/1.3.8/NEWS