Skip to content

Known CVE

ProFTPD ≤ 1.3.8b - Privilege Escalation via mod_sql

ProFTPD versions through 1.3.8b (before commit cec01cc) contain a vulnerability in the mod_sql module due to improper handling of supplemental groups. This flaw allows authenticated users without explicitly assigned supplemental groups to inherit root group privileges (GID 0), potentially granting unauthorized access to sensitive system resources.

CVE-2024-48651

High2024CVSS 7.5CWE-863

cve2024 · network · ftp · proftpd · tcp · passive · priv-esc · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website