NVD

Id
47873  
Name
CVE-2009-0542  
Description
SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a """ (single quote) character during variable substitution by mod_sql.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-12  
Modified Date
2009-06-09  
Seq
2009-0542  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239820 47873 CVE-2009-0542 http://bugs.proftpd.org/show_bug.cgi?id=3180  View
239821 47873 CVE-2009-0542 GLSA-200903-27  View
239822 47873 CVE-2009-0542 DSA-1730  View
239823 47873 CVE-2009-0542 MDVSA-2009:061  View
239824 47873 CVE-2009-0542 8037  View
239825 47873 CVE-2009-0542 [oss-security] 20090211 CVE request for proftpd  View
239826 47873 CVE-2009-0542 [oss-security] 20090211 Re: CVE request for proftpd  View
239827 47873 CVE-2009-0542 [oss-security] 20090211 Re: CVE request for proftpd  View
239828 47873 CVE-2009-0542 20090210 Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)  View
239829 47873 CVE-2009-0542 20090210 Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)  View
239830 47873 CVE-2009-0542 20090210 ProFTPd with mod_mysql Authentication Bypass Exploit  View
239831 47873 CVE-2009-0542 20090211 Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40058 JVNDB-2009-001064 ProFTPD における "%" 文字の処理に関連する SQL インジェクションの脆弱性 ProFTPD には、ユーザ名の "%" 文字の処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2009-0542 37973 CVE-2009-0542 47873 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001064.html 2009-02-12 2009-03-10 View