Product by ProFTPD Project

Proftpd

25 known vulnerabilities in Proftpd (ProFTPD Project), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Proftpd (ProFTPD Project)

Critical	CVE-2010-20103	ProFTPD 1.3.3c Backdoor Command Execution also in 2 other products	9.8	20.08.2025
Not rated	CVE-2006-5815	ProFTPD: Stack-Based Buffer Overflow	—	08.11.2006
Not rated	CVE-2009-0542	ProFTPD: SQL Injection	—	12.02.2009
High	CVE-2026-35025	ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR also in 2 other products	8.1	24.06.2026
Not rated	CVE-2003-0831	ProFTPD: Buffer Overflow	—	25.09.2003
Not rated	CVE-1999-0368	Washington University Wu-ftpd: Buffer Overflow also in 7 other products	—	29.09.1999
Not rated	CVE-2001-1501	ProFTPD: Denial of Service	—	21.06.2005
Not rated	CVE-1999-0911	ProFTPD: Buffer Overflow	—	04.02.2000
Not rated	CVE-2003-0500	ProFTPD: SQL Injection	—	04.07.2003
Not rated	CVE-2006-6170	ProFTPD: Buffer Overflow	—	30.11.2006
Not rated	CVE-2005-4816	ProFTPD: Buffer Overflow	—	23.12.2006
Not rated	CVE-2001-1500	ProFTPD: security vulnerability	—	21.06.2005
Not rated	CVE-2007-2165	ProFTPD: Authentication Bypass	—	22.04.2007
Not rated	CVE-2001-0318	ProFTPD: Format String	—	07.05.2001
Not rated	CVE-2006-6171	ProFTPD: security vulnerability	—	30.11.2006
Not rated	CVE-2005-2390	ProFTPD: Format String	—	27.07.2005
Not rated	CVE-2004-0432	ProFTPD: security vulnerability also in 2 other products	—	05.05.2004
High	CVE-2026-53994	ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation also in 2 other products	6.5	18.07.2026
Not rated	CVE-2008-4242	ProFTPD: Cross-Site Request Forgery (CSRF)	—	25.09.2008
Not rated	CVE-2001-0027	ProFTPD: Privilege Escalation	—	02.02.2001
Not rated	CVE-1999-1475	ProFTPD: Privilege Escalation	—	12.09.2001
Medium	CVE-2026-119146	ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap	5.6	30.10.2026
Medium	CVE-2026-119364	ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass also in 1 other product	5.3	30.10.2026
Medium	CVE-2026-119147	ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass also in 1 other product	4.3	30.10.2026
Not rated	CVE-2006-6563	ProFTPD: Stack-Based Buffer Overflow	—	15.12.2006

All products by ProFTPD Project

Key figures

Vulnerabilities