CVE-2008-7265 Denial of service in n/a

What is CVE-2008-7265?

CVE-2008-7265 is a medium-severity denial of service vulnerability in n/a, published on 9 Nov 2010. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.

Weakness: CWE-399

Which versions are affected by CVE-2008-7265?

It affects 1 product.

Products include Proftpd Proftpd.

How do I fix CVE-2008-7265?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2008-7265 being exploited?

There is no known exploitation of CVE-2008-7265 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-4221 Memory corruption in n/a Critical 10.0
• CVE-2010-20103 ProFTPD 1.3.3c Backdoor Command Execution Critical 9.3
• CVE-2011-4130 Use after free in n/a Critical 9.0
• CVE-2026-63090 ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly High 8.7
• CVE-2026-35025 ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR High 8.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2008-7265, GHSA-w56p-h676-566f.