CVE-2001-1500: ProFTPD Project ProFTPD

High severity, CVSS 7.5. EPSS: 12.4% chance of exploitation in the next 30 days.

ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged.

Affected products

• ProFTPD Project ProFTPD: version 1.2 only; version 1.2.0_rc3 only; version 1.2.1 only; version 1.2.2 only; version 1.2.2_rc1 only; version 1.2.2_rc2 only; …

Published 2001-12-31. Last modified 2026-06-16.