CVE-2010-4652

Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query.

• CWE-119

• https://bugs.proftpd.org/show_bug.cgi?id=3536Exploit, Patch
• https://lists.fedoraproject.org/pipermail/package-announce/2011-January/053537.html
• https://lists.fedoraproject.org/pipermail/package-announce/2011-January/053540.html
• https://phrack.org/issues.html?issue=67&id=7#article
• https://proftpd.org/docs/RELEASE_NOTES-1.3.3d
• https://www.debian.org/security/2011/dsa-2191
• https://www.mandriva.com/security/advisories?name=MDVSA-2011:023
• https://www.securityfocus.com/bid/44933
• https://www.vupen.com/english/advisories/2011/0248Vendor Advisory
• https://www.vupen.com/english/advisories/2011/0331
• https://bugzilla.redhat.com/show_bug.cgi?id=670170Exploit, Patch
• https://bugs.proftpd.org/show_bug.cgi?id=3536Exploit, Patch
• https://lists.fedoraproject.org/pipermail/package-announce/2011-January/053537.html
• https://lists.fedoraproject.org/pipermail/package-announce/2011-January/053540.html
• https://phrack.org/issues.html?issue=67&id=7#article
• https://proftpd.org/docs/RELEASE_NOTES-1.3.3d
• https://www.debian.org/security/2011/dsa-2191
• https://www.mandriva.com/security/advisories?name=MDVSA-2011:023
• https://www.securityfocus.com/bid/44933
• https://www.vupen.com/english/advisories/2011/0248Vendor Advisory
• https://www.vupen.com/english/advisories/2011/0331
• https://bugzilla.redhat.com/show_bug.cgi?id=670170Exploit, Patch

Published

Feb 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4646Cross-site scripting (XSS) vulnerability in Hastymail2 befor…
• CVE-2010-4647Multiple cross-site scripting (XSS) vulnerabilities in the H…
• CVE-2010-4648The orinoco_ioctl_set_auth function in drivers/net/wireless/…
• CVE-2010-4649Integer overflow in the ib_uverbs_poll_cq function in driver…
• CVE-2010-4650Buffer overflow in the fuse_do_ioctl function in fs/fuse/fil…
• CVE-2010-4651Directory traversal vulnerability in util.c in GNU patch 2.6…
• CVE-2010-4653An integer overflow condition in poppler before 0.16.3 can o…6.5
• CVE-2010-4654poppler before 0.16.3 has malformed commands that may cause …7.8
• CVE-2010-4655net/core/ethtool.c in the Linux kernel before 2.6.36 does no…5.5
• CVE-2010-4656The iowarrior_write function in drivers/usb/misc/iowarrior.c…7.8
• CVE-2010-4657PHP5 before 5.4.4 allows passing invalid utf-8 strings via t…7.5
• CVE-2010-4658statusnet through 2010 allows attackers to spoof syslog mess…5.3