cve/2019/CVE-2019-19271.md

CVE-2019-19271

Description

An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server.

POC

Reference

• https://github.com/proftpd/proftpd/issues/860

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/Dokukin1/Metasploitable
• https://github.com/Furious992/HW13-01
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/NikulinMS/13-01-hw
• https://github.com/Zhivarev/13-01-hw
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/firatesatoglu/shodanSearch
• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/mrt2h/DZ
• https://github.com/pedr0alencar/vlab-metasploitable2
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/vshaliii/Funbox2-rookie
• https://github.com/zzzWTF/db-13-01