CVE-2004-0346: ProFTPD

High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.

Affected products

• ProFTPD ProFTPD: from 1.2.7, before 1.2.9 (fixed in 1.2.9); version 1.2.9 only

Published 2004-11-23. Last modified 2026-06-16.