CVE-2019-18217

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.6b ProFTPD version 1.3.7rc before 1.3.7rc2

Description The issue is related to the incorrect handling of overly long commands in the main.c component of the ProFTPD FTP server. This can lead to a remote unauthenticated denial-of-service, causing the server to enter an infinite loop. The vulnerability allows a remote attacker to exploit this weakness, resulting in a denial-of-service.

Recommendations For ProFTPD versions prior to 1.3.6b, update to version 1.3.6b or later. For ProFTPD version 1.3.7rc before 1.3.7rc2, update to version 1.3.7rc2 or later.