CVE-2009-0543: ProFTPD

Medium severity, CVSS 6.8. EPSS: 15.8% chance of exploitation in the next 30 days.

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.

Affected products

• ProFTPD ProFTPD: version 1.3.1 only

Published 2009-02-12. Last modified 2026-06-16.