CVE-2001-0027

mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-02-12

Last modified

2024-08-08

Affected products

• Proftpd (Proftpd Project)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5737