CVE-2010-4221: ProFTPD

High severity, CVSS 10.0. EPSS: 91.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.

Affected products

• ProFTPD ProFTPD: version 1.3.2 only; version 1.3.3 only

Published 2010-11-09. Last modified 2026-06-16.