ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-06-21T04:00:00

Updated: 2024-08-08T04:58:11.664Z

Reserved: 2005-06-21T00:00:00

Link: CVE-2001-1500

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2001-12-31T05:00:00.000

Modified: 2017-12-19T02:29:37.080

Link: CVE-2001-1500

cve-icon Redhat

No data.