UnratedFix available
proftpd-dfsg — security advisory
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
- Products
- proftpd-dfsg
- Affected versions
- Not specified
- Fixed versions
- 1.3.4~rc3-2
- CVEs
- CVE-2011-4130
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 22:38 UTC · Revision 1
Source evidence
Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.
osv:DEBIAN-CVE-2011-4130
proftpd-dfsg
Fixed versions: 1.3.4~rc3-2
proftpd-dfsg
Fixed versions: 1.3.4~rc3-2
proftpd-dfsg
Fixed versions: 1.3.4~rc3-2
Complete source record
{
"id": "170ae1ac2fb5dd93e00e7c1e281441175ce691a0340eae5b37ec375e0b372461",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2011-4130",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2011-4130",
"summary": "Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer.",
"evidence": "osv:DEBIAN-CVE-2011-4130",
"products": [
{
"name": {
"value": "proftpd-dfsg",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.4~rc3-2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "proftpd-dfsg",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.4~rc3-2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "proftpd-dfsg",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.4~rc3-2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2011-4130",
"aliases": [
"DEBIAN-CVE-2011-4130"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.4~rc3-2"
}
]
}
],
"package": {
"name": "proftpd-dfsg",
"purl": "pkg:deb/debian/proftpd-dfsg?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-4130.json"
},
"ecosystem_specific": {
"urgency": "high"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.4~rc3-2"
}
]
}
],
"package": {
"name": "proftpd-dfsg",
"purl": "pkg:deb/debian/proftpd-dfsg?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-4130.json"
},
"ecosystem_specific": {
"urgency": "high"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.4~rc3-2"
}
]
}
],
"package": {
"name": "proftpd-dfsg",
"purl": "pkg:deb/debian/proftpd-dfsg?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-4130.json"
},
"ecosystem_specific": {
"urgency": "high"
}
}
],
"modified": "2026-10-23T17:47:26.566322120Z",
"provider": "osv",
"upstream": [
"CVE-2011-4130"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2011-4130"
]
},
"related_cves": [
{
"value": "CVE-2011-4130",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 416944,
"published_at": "2011-12-06T11:55:06.503+00:00"
}