Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote…
Priority MEDIUM 53CWE-399Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
Why it matters now
EPSS 0.12625 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 62
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:proftpd:proftpd:*:f:*:*:*:*:*:* | up to 1.3.3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:*:*:*:*:*:*:* | 1.2.0 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:pre10:*:*:*:*:*:* | 1.2.0 pre10 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:pre9:*:*:*:*:*:* | 1.2.0 pre9 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:rc1:*:*:*:*:*:* | 1.2.0 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:rc2:*:*:*:*:*:* | 1.2.0 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.0:rc3:*:*:*:*:*:* | 1.2.0 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.1:*:*:*:*:*:*:* | 1.2.1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.2:rc1:*:*:*:*:*:* | 1.2.2 rc1 | Vulnerable | ProFTPD |
- cpe:2.3:a:proftpd:proftpd:*:f:*:*:*:*:*:* Versions up to 1.3.3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:pre10:*:*:*:*:*:* Versions 1.2.0 pre10 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:pre9:*:*:*:*:*:* Versions 1.2.0 pre9 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:rc1:*:*:*:*:*:* Versions 1.2.0 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:rc2:*:*:*:*:*:* Versions 1.2.0 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.0:rc3:*:*:*:*:*:* Versions 1.2.0 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.2:rc1:*:*:*:*:*:* Versions 1.2.2 rc1 Vulnerable ·ProFTPD
Show 52 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:proftpd:proftpd:1.2.2:rc2:*:*:*:*:*:* | 1.2.2 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.2:rc3:*:*:*:*:*:* | 1.2.2 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.3:*:*:*:*:*:*:* | 1.2.3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.4:*:*:*:*:*:*:* | 1.2.4 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.5:*:*:*:*:*:*:* | 1.2.5 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.5:rc1:*:*:*:*:*:* | 1.2.5 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.5:rc2:*:*:*:*:*:* | 1.2.5 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.5:rc3:*:*:*:*:*:* | 1.2.5 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.6:*:*:*:*:*:*:* | 1.2.6 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.6:rc1:*:*:*:*:*:* | 1.2.6 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.6:rc2:*:*:*:*:*:* | 1.2.6 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.7:*:*:*:*:*:*:* | 1.2.7 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.7:rc1:*:*:*:*:*:* | 1.2.7 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.7:rc2:*:*:*:*:*:* | 1.2.7 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.7:rc3:*:*:*:*:*:* | 1.2.7 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.8:*:*:*:*:*:*:* | 1.2.8 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.8:rc1:*:*:*:*:*:* | 1.2.8 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.8:rc2:*:*:*:*:*:* | 1.2.8 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.9:*:*:*:*:*:*:* | 1.2.9 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.9:rc1:*:*:*:*:*:* | 1.2.9 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.9:rc2:*:*:*:*:*:* | 1.2.9 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.9:rc3:*:*:*:*:*:* | 1.2.9 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.10:*:*:*:*:*:*:* | 1.2.10 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.10:rc1:*:*:*:*:*:* | 1.2.10 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.10:rc2:*:*:*:*:*:* | 1.2.10 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.2.10:rc3:*:*:*:*:*:* | 1.2.10 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:a:*:*:*:*:*:* | 1.3.0 a | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:rc1:*:*:*:*:*:* | 1.3.0 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:rc2:*:*:*:*:*:* | 1.3.0 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:rc3:*:*:*:*:*:* | 1.3.0 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:rc4:*:*:*:*:*:* | 1.3.0 rc4 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.0:rc5:*:*:*:*:*:* | 1.3.0 rc5 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:* | 1.3.1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.1:rc1:*:*:*:*:*:* | 1.3.1 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.1:rc2:*:*:*:*:*:* | 1.3.1 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.1:rc3:*:*:*:*:*:* | 1.3.1 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.2:*:*:*:*:*:*:* | 1.3.2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.2:rc1:*:*:*:*:*:* | 1.3.2 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.2:rc2:*:*:*:*:*:* | 1.3.2 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.2:rc3:*:*:*:*:*:* | 1.3.2 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.2:rc4:*:*:*:*:*:* | 1.3.2 rc4 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:a:*:*:*:*:*:* | 1.3.3 a | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:b:*:*:*:*:*:* | 1.3.3 b | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:c:*:*:*:*:*:* | 1.3.3 c | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:d:*:*:*:*:*:* | 1.3.3 d | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:e:*:*:*:*:*:* | 1.3.3 e | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:rc1:*:*:*:*:*:* | 1.3.3 rc1 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:rc2:*:*:*:*:*:* | 1.3.3 rc2 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:rc3:*:*:*:*:*:* | 1.3.3 rc3 | Vulnerable | ProFTPD |
| cpe:2.3:a:proftpd:proftpd:1.3.3:rc4:*:*:*:*:*:* | 1.3.3 rc4 | Vulnerable | ProFTPD |
- cpe:2.3:a:proftpd:proftpd:1.2.2:rc2:*:*:*:*:*:* Versions 1.2.2 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.2:rc3:*:*:*:*:*:* Versions 1.2.2 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.5:rc1:*:*:*:*:*:* Versions 1.2.5 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.5:rc2:*:*:*:*:*:* Versions 1.2.5 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.5:rc3:*:*:*:*:*:* Versions 1.2.5 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.6:rc1:*:*:*:*:*:* Versions 1.2.6 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.6:rc2:*:*:*:*:*:* Versions 1.2.6 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.7:rc1:*:*:*:*:*:* Versions 1.2.7 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.7:rc2:*:*:*:*:*:* Versions 1.2.7 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.7:rc3:*:*:*:*:*:* Versions 1.2.7 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.8:rc1:*:*:*:*:*:* Versions 1.2.8 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.8:rc2:*:*:*:*:*:* Versions 1.2.8 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.9:rc1:*:*:*:*:*:* Versions 1.2.9 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.9:rc2:*:*:*:*:*:* Versions 1.2.9 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.9:rc3:*:*:*:*:*:* Versions 1.2.9 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc1:*:*:*:*:*:* Versions 1.2.10 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc2:*:*:*:*:*:* Versions 1.2.10 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc3:*:*:*:*:*:* Versions 1.2.10 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:a:*:*:*:*:*:* Versions 1.3.0 a Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc1:*:*:*:*:*:* Versions 1.3.0 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc2:*:*:*:*:*:* Versions 1.3.0 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc3:*:*:*:*:*:* Versions 1.3.0 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc4:*:*:*:*:*:* Versions 1.3.0 rc4 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc5:*:*:*:*:*:* Versions 1.3.0 rc5 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc1:*:*:*:*:*:* Versions 1.3.1 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc2:*:*:*:*:*:* Versions 1.3.1 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc3:*:*:*:*:*:* Versions 1.3.1 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc1:*:*:*:*:*:* Versions 1.3.2 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc2:*:*:*:*:*:* Versions 1.3.2 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc3:*:*:*:*:*:* Versions 1.3.2 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc4:*:*:*:*:*:* Versions 1.3.2 rc4 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:a:*:*:*:*:*:* Versions 1.3.3 a Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:b:*:*:*:*:*:* Versions 1.3.3 b Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:c:*:*:*:*:*:* Versions 1.3.3 c Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:d:*:*:*:*:*:* Versions 1.3.3 d Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:e:*:*:*:*:*:* Versions 1.3.3 e Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc1:*:*:*:*:*:* Versions 1.3.3 rc1 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc2:*:*:*:*:*:* Versions 1.3.3 rc2 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc3:*:*:*:*:*:* Versions 1.3.3 rc3 Vulnerable ·ProFTPD
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc4:*:*:*:*:*:* Versions 1.3.3 rc4 Vulnerable ·ProFTPD
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2011-4130
- 2026-10-03 Alias added: GHSA-jmgj-wg56-hjr9
References
More Proftpd vulnerabilities
- TI-2015-02923 Access control flaw in ProFTPD mod_copy allows arbitrary file access KEVCVSS 3.1CRITICAL 10.0
- TI-2010-03974 Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in… CVSS 2.0HIGH 10.0
- TI-2010-05061 ProFTPD 1.3.3c Backdoor Command Execution CVSS 4.0CRITICAL 9.3
- TI-2019-09597 An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for… CVSS 3.1CRITICAL 9.8
- TI-2026-30493 SQL injection in ProFTPD CVSS 3.1HIGH 8.1
- TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
Sources
- CVE-2011-4130 · CVE Program
- CVE-2011-4130 · NVD
- FIRST EPSS
- GHSA-jmgj-wg56-hjr9 · GitHub Advisory Database · CC BY 4.0
- CVE-2011-4130 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences