CVE-2021-47865: ProFTPD 1.3.7a - Remote Denial of Service

Security readout for executives and security teams

CVE-2021-47865 is a remote denial-of-service issue in ProFTPD 1.3.7a. An unauthenticated network attacker can consume available FTP connection capacity, preventing legitimate users from accessing the service. This is primarily an availability risk, not evidence of data theft or code execution. Exposure is highest for organizations running ProFTPD 1.3.7a on internet-facing or broadly reachable FTP services. Systems not running ProFTPD, or not running version 1.3.7a, are not identified as affected in the provided sources. Prioritize if FTP is business-critical or internet-facing. The main business risk is service outage and operational disruption. If ProFTPD 1.3.7a is not present, urgency is low for this specific CVE. Mitigation focus: Identify any ProFTPD 1.3.7a deployments, especially internet-facing FTP servers.; Check ProFTPD and distribution vendor guidance for fixed versions or configuration recommendations.; Restrict FTP access to trusted networks where operationally possible..

Prepared

Apr 30, 2026, 02:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.