CVE-2008-4242: ProFTPD Project ProFTPD

Medium severity, CVSS 6.8. EPSS: 7.1% chance of exploitation in the next 30 days.

ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.

Affected products

• ProFTPD Project ProFTPD: version 1.3.1 only

Published 2008-09-25. Last modified 2026-06-16.