CVE:CVE-2003-0500
CNNVD:CNNVD-200308-006
ProFTPD 1.2.9rc1之前版本的PostgreSQL认证模块存在SQL注入漏洞。远程攻击者借助USER名绕过认证或者盗取密码来执行任意SQL且提升特权。
solution:Upgrade proftpd_project proftpd to a higher version than 1.2.9_rc1,and avoid the version 1.2.9_rc1