peter bassill · operator
$ cve CVE-2011-1137 JSON

CVE-2011-1137 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 28.1% (pctl 98)

Patch early

A public exploit exists.

Description

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS28.07% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-189
On CISA KEVno
Public exploityes
Published2011-03-11
Last modified2026-06-16

Affected (1)

VendorProduct
proftpdproftpd

Public exploits

SourceTitleDate
exploit-dbProFTPd - 'mod_sftp' Integer Overflow Denial of Service (PoC)2011-02-07

References

→ the Explorer  ·  watch your stack  ·  NVD