CVE-2003-0831: ProFTPD Project ProFTPD

High severity, CVSS 9.0. EPSS: 58.4% chance of exploitation in the next 30 days.

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.

Affected products

• ProFTPD Project ProFTPD: version 1.2.7 only; version 1.2.7_rc1 only; version 1.2.7_rc2 only; version 1.2.7_rc3 only; version 1.2.8 only; version 1.2.8_rc1 only; …

Published 2003-11-17. Last modified 2026-06-16.