CVE-2023-51713 - Vulnerability Details - OpenCVE

ReportizFlow

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Proftpd	Proftpd

Configuration 1 [-]

cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/proftpd/proftpd/blob/1.3.8/NEWS
https://github.com/proftpd/proftpd/issues/1683
https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554
https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html

History

Mon, 03 Nov 2025 22:30:00 +0000

Type	Values Removed	Values Added
References		https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-22T00:00:00.000Z

Updated: 2025-11-03T21:50:17.839Z

Reserved: 2023-12-22T00:00:00.000Z

Link: CVE-2023-51713

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-12-22T03:15:09.730

Modified: 2025-11-03T22:16:31.040

Link: CVE-2023-51713

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*", "matchCriteriaId": "82A8E114-13E4-4799-8838-37D9BB4BB4D1", "versionEndExcluding": "1.3.8a", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics."}, {"lang": "es", "value": "make_ftp_cmd en main.c en ProFTPD anterior a 1.3.8a tiene una lectura fuera de los l\u00edmites de un byte y el daemon falla debido a un mal manejo de las sem\u00e1nticas de quote/backslash."}], "id": "CVE-2023-51713", "lastModified": "2025-11-03T22:16:31.040", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-12-22T03:15:09.730", "references": [{"source": "[email protected]", "tags": ["Release Notes"], "url": "https://github.com/proftpd/proftpd/blob/1.3.8/NEWS"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/proftpd/proftpd/issues/1683"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/proftpd/proftpd/blob/1.3.8/NEWS"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/proftpd/proftpd/issues/1683"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/proftpd/proftpd/issues/1683#issuecomment-1712887554"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Primary"}]}