CVE-2009-0542: SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arb...

Security readout for executives and security teams

This vulnerability affects ProFTPD Server 1.3.1 through 1.3.2rc2 when SQL-backed authentication is used. A remote attacker could abuse username handling to alter backend SQL queries, potentially bypassing authentication or changing database behavior. Public exploit references exist, but the supplied sources do not show CISA KEV listing or confirmed active exploitation. Exposure is most likely on internet-facing ProFTPD deployments running 1.3.1 through 1.3.2rc2 with mod_sql-based authentication enabled, especially mod_mysql or similar SQL backends. Systems using vendor packages from 2009-era distributions should be checked for patched advisory status. Prioritize remediation for any internet-facing or partner-facing FTP service using SQL authentication. This is an old issue, but legacy FTP services often persist unmanaged, and public exploit references increase risk if vulnerable versions remain exposed. Mitigation focus: Upgrade ProFTPD using fixed packages from your operating system or vendor advisory channel.; Identify and retire ProFTPD 1.3.1 through 1.3.2rc2 deployments.; Disable mod_sql if SQL-backed FTP authentication is not required..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.