cbcvebase.
CVE-2001-0456
published 2001-06-27

CVE-2001-0456: postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access…

PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
5.88%
92.5th percentile
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.

Affected

1 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.