Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as demonstrated by use of SQLAuthTypes Plaintext in mod_sql, with data retrieved from /etc/passwd.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProFTPD Auth API多个认证模块绕过安全限制漏洞
Vulnerability Description
ProFTPD是一款开放源代码FTP服务程序。 ProFTPD的用户认证API实现上存在漏洞，远程攻击者可能利用此漏洞绕过认证获取非授权访问。 由于FTP协议请求独立的USER和PASS命令的方式，ProFTPD必须分别查询名为USER用户数据和接收到PASS时该用户的认证情况。 但ProFTPD允许同时存在多个认证模块(如mod_auth_unix、mod_sql、mod_ldap)，因此可能导致其中一个认证模块(如mod_auth_unix)提供用户数据而另一个模块(如mod_sql)认证该用户数据。
CVSS Information
N/A
Vulnerability Type
N/A