CVE-2009-0543

N/A Unknown

Published: February 12, 2009 Modified: April 23, 2026

Description

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.proftpd.org/show_bug.cgi?id=3173

Source: cve@mitre.org

http://secunia.com/advisories/34268

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200903-27.xml

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1730

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:061

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/02/11/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/02/11/5

Source: cve@mitre.org

http://bugs.proftpd.org/show_bug.cgi?id=3173