Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proftpd | Proftpd | 1.2.7 (including) | 1.2.9 (excluding) |
| Proftpd | Proftpd | 1.2.9 (including) | 1.2.9 (including) |
| Proftpd | Proftpd | 1.2.9-rc1 (including) | 1.2.9-rc1 (including) |
| Proftpd | Proftpd | 1.2.9-rc2 (including) | 1.2.9-rc2 (including) |