Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-cbu1-85d6-5bhz
SummaryThe mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Aliases
0
alias CVE-2016-3125
Fixed_packages
0
url pkg:deb/debian/proftpd-dfsg@1.3.5b-1?distro=trixie
purl pkg:deb/debian/proftpd-dfsg@1.3.5b-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.5b-1%3Fdistro=trixie
1
url pkg:deb/debian/proftpd-dfsg@1.3.5b-4%2Bdeb9u5
purl pkg:deb/debian/proftpd-dfsg@1.3.5b-4%2Bdeb9u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-6kef-2azs-xugx
2
vulnerability VCID-6zv5-sn2d-ffa6
3
vulnerability VCID-8yrv-hee2-9qdc
4
vulnerability VCID-fn5e-rmve-c3f4
5
vulnerability VCID-gw9f-rc1s-8udd
6
vulnerability VCID-jczb-y4fh-xucn
7
vulnerability VCID-jzn6-bzzf-nugp
8
vulnerability VCID-pcah-e3hh-gbd7
9
vulnerability VCID-tc5c-pyzn-ekh1
10
vulnerability VCID-u7k3-9pb6-nqa8
11
vulnerability VCID-wwz1-zb24-7qgy
12
vulnerability VCID-xeeh-rpu9-63g6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.5b-4%252Bdeb9u5
2
url pkg:deb/debian/proftpd-dfsg@1.3.7a%2Bdfsg-12%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/proftpd-dfsg@1.3.7a%2Bdfsg-12%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.7a%252Bdfsg-12%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/proftpd-dfsg@1.3.8%2Bdfsg-4%2Bdeb12u4?distro=trixie
purl pkg:deb/debian/proftpd-dfsg@1.3.8%2Bdfsg-4%2Bdeb12u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gw9f-rc1s-8udd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.8%252Bdfsg-4%252Bdeb12u4%3Fdistro=trixie
4
url pkg:deb/debian/proftpd-dfsg@1.3.8.c%2Bdfsg-4%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/proftpd-dfsg@1.3.8.c%2Bdfsg-4%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.8.c%252Bdfsg-4%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/proftpd-dfsg@1.3.9~dfsg-4?distro=trixie
purl pkg:deb/debian/proftpd-dfsg@1.3.9~dfsg-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.9~dfsg-4%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/proftpd-dfsg@1.3.0-19
purl pkg:deb/debian/proftpd-dfsg@1.3.0-19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-1hz3-91g9-6baf
2
vulnerability VCID-55bs-th2b-cbfy
3
vulnerability VCID-6kef-2azs-xugx
4
vulnerability VCID-6zv5-sn2d-ffa6
5
vulnerability VCID-73rz-xdrz-ryez
6
vulnerability VCID-8yrv-hee2-9qdc
7
vulnerability VCID-bgf6-swz8-j7bt
8
vulnerability VCID-c26f-t6bh-fkc6
9
vulnerability VCID-cbu1-85d6-5bhz
10
vulnerability VCID-fn5e-rmve-c3f4
11
vulnerability VCID-gskk-nnr5-ukac
12
vulnerability VCID-gw9f-rc1s-8udd
13
vulnerability VCID-jczb-y4fh-xucn
14
vulnerability VCID-jxke-yeum-8fh2
15
vulnerability VCID-jzn6-bzzf-nugp
16
vulnerability VCID-n5dr-ejmr-2ug9
17
vulnerability VCID-pcah-e3hh-gbd7
18
vulnerability VCID-r4vc-yu6n-kkhe
19
vulnerability VCID-s84k-unmk-ubgt
20
vulnerability VCID-tc5c-pyzn-ekh1
21
vulnerability VCID-u7k3-9pb6-nqa8
22
vulnerability VCID-u8pb-1kgt-z3fp
23
vulnerability VCID-v1n2-dgwq-6bgh
24
vulnerability VCID-v3k9-71y7-e7bu
25
vulnerability VCID-wwz1-zb24-7qgy
26
vulnerability VCID-xeeh-rpu9-63g6
27
vulnerability VCID-xmjm-ep49-1uh2
28
vulnerability VCID-y3j2-e8hq-w3em
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.0-19
1
url pkg:deb/debian/proftpd-dfsg@1.3.0-19etch3
purl pkg:deb/debian/proftpd-dfsg@1.3.0-19etch3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-1hz3-91g9-6baf
2
vulnerability VCID-55bs-th2b-cbfy
3
vulnerability VCID-6kef-2azs-xugx
4
vulnerability VCID-6zv5-sn2d-ffa6
5
vulnerability VCID-73rz-xdrz-ryez
6
vulnerability VCID-8yrv-hee2-9qdc
7
vulnerability VCID-bgf6-swz8-j7bt
8
vulnerability VCID-c26f-t6bh-fkc6
9
vulnerability VCID-cbu1-85d6-5bhz
10
vulnerability VCID-fn5e-rmve-c3f4
11
vulnerability VCID-gskk-nnr5-ukac
12
vulnerability VCID-gw9f-rc1s-8udd
13
vulnerability VCID-jczb-y4fh-xucn
14
vulnerability VCID-jxke-yeum-8fh2
15
vulnerability VCID-jzn6-bzzf-nugp
16
vulnerability VCID-n5dr-ejmr-2ug9
17
vulnerability VCID-pcah-e3hh-gbd7
18
vulnerability VCID-r4vc-yu6n-kkhe
19
vulnerability VCID-s84k-unmk-ubgt
20
vulnerability VCID-tc5c-pyzn-ekh1
21
vulnerability VCID-u7k3-9pb6-nqa8
22
vulnerability VCID-u8pb-1kgt-z3fp
23
vulnerability VCID-v1n2-dgwq-6bgh
24
vulnerability VCID-v3k9-71y7-e7bu
25
vulnerability VCID-wwz1-zb24-7qgy
26
vulnerability VCID-xeeh-rpu9-63g6
27
vulnerability VCID-xmjm-ep49-1uh2
28
vulnerability VCID-y3j2-e8hq-w3em
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.0-19etch3
2
url pkg:deb/debian/proftpd-dfsg@1.3.1-17lenny9
purl pkg:deb/debian/proftpd-dfsg@1.3.1-17lenny9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-1hz3-91g9-6baf
2
vulnerability VCID-55bs-th2b-cbfy
3
vulnerability VCID-6kef-2azs-xugx
4
vulnerability VCID-6zv5-sn2d-ffa6
5
vulnerability VCID-73rz-xdrz-ryez
6
vulnerability VCID-8yrv-hee2-9qdc
7
vulnerability VCID-bgf6-swz8-j7bt
8
vulnerability VCID-c26f-t6bh-fkc6
9
vulnerability VCID-cbu1-85d6-5bhz
10
vulnerability VCID-fn5e-rmve-c3f4
11
vulnerability VCID-gw9f-rc1s-8udd
12
vulnerability VCID-jczb-y4fh-xucn
13
vulnerability VCID-jxke-yeum-8fh2
14
vulnerability VCID-jzn6-bzzf-nugp
15
vulnerability VCID-n5dr-ejmr-2ug9
16
vulnerability VCID-pcah-e3hh-gbd7
17
vulnerability VCID-r4vc-yu6n-kkhe
18
vulnerability VCID-s84k-unmk-ubgt
19
vulnerability VCID-tc5c-pyzn-ekh1
20
vulnerability VCID-u7k3-9pb6-nqa8
21
vulnerability VCID-u8pb-1kgt-z3fp
22
vulnerability VCID-v3k9-71y7-e7bu
23
vulnerability VCID-wwz1-zb24-7qgy
24
vulnerability VCID-xeeh-rpu9-63g6
25
vulnerability VCID-xmjm-ep49-1uh2
26
vulnerability VCID-y3j2-e8hq-w3em
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.1-17lenny9
3
url pkg:deb/debian/proftpd-dfsg@1.3.3a-6squeeze7
purl pkg:deb/debian/proftpd-dfsg@1.3.3a-6squeeze7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-6kef-2azs-xugx
2
vulnerability VCID-6zv5-sn2d-ffa6
3
vulnerability VCID-73rz-xdrz-ryez
4
vulnerability VCID-8yrv-hee2-9qdc
5
vulnerability VCID-c26f-t6bh-fkc6
6
vulnerability VCID-cbu1-85d6-5bhz
7
vulnerability VCID-fn5e-rmve-c3f4
8
vulnerability VCID-gw9f-rc1s-8udd
9
vulnerability VCID-jczb-y4fh-xucn
10
vulnerability VCID-jxke-yeum-8fh2
11
vulnerability VCID-jzn6-bzzf-nugp
12
vulnerability VCID-n5dr-ejmr-2ug9
13
vulnerability VCID-pcah-e3hh-gbd7
14
vulnerability VCID-r4vc-yu6n-kkhe
15
vulnerability VCID-tc5c-pyzn-ekh1
16
vulnerability VCID-u7k3-9pb6-nqa8
17
vulnerability VCID-wwz1-zb24-7qgy
18
vulnerability VCID-xeeh-rpu9-63g6
19
vulnerability VCID-xmjm-ep49-1uh2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.3a-6squeeze7
4
url pkg:deb/debian/proftpd-dfsg@1.3.4a-5%2Bdeb7u3
purl pkg:deb/debian/proftpd-dfsg@1.3.4a-5%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-6kef-2azs-xugx
2
vulnerability VCID-6zv5-sn2d-ffa6
3
vulnerability VCID-73rz-xdrz-ryez
4
vulnerability VCID-8yrv-hee2-9qdc
5
vulnerability VCID-c26f-t6bh-fkc6
6
vulnerability VCID-cbu1-85d6-5bhz
7
vulnerability VCID-fn5e-rmve-c3f4
8
vulnerability VCID-gw9f-rc1s-8udd
9
vulnerability VCID-jczb-y4fh-xucn
10
vulnerability VCID-jxke-yeum-8fh2
11
vulnerability VCID-jzn6-bzzf-nugp
12
vulnerability VCID-pcah-e3hh-gbd7
13
vulnerability VCID-tc5c-pyzn-ekh1
14
vulnerability VCID-u7k3-9pb6-nqa8
15
vulnerability VCID-wwz1-zb24-7qgy
16
vulnerability VCID-xeeh-rpu9-63g6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.4a-5%252Bdeb7u3
5
url pkg:deb/debian/proftpd-dfsg@1.3.5-1.1
purl pkg:deb/debian/proftpd-dfsg@1.3.5-1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-6kef-2azs-xugx
2
vulnerability VCID-6zv5-sn2d-ffa6
3
vulnerability VCID-73rz-xdrz-ryez
4
vulnerability VCID-8yrv-hee2-9qdc
5
vulnerability VCID-c26f-t6bh-fkc6
6
vulnerability VCID-cbu1-85d6-5bhz
7
vulnerability VCID-fn5e-rmve-c3f4
8
vulnerability VCID-gw9f-rc1s-8udd
9
vulnerability VCID-jczb-y4fh-xucn
10
vulnerability VCID-jzn6-bzzf-nugp
11
vulnerability VCID-pcah-e3hh-gbd7
12
vulnerability VCID-tc5c-pyzn-ekh1
13
vulnerability VCID-u7k3-9pb6-nqa8
14
vulnerability VCID-wwz1-zb24-7qgy
15
vulnerability VCID-xeeh-rpu9-63g6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.5-1.1
6
url pkg:deb/debian/proftpd-dfsg@1.3.5-1.1%2Bdeb8u2
purl pkg:deb/debian/proftpd-dfsg@1.3.5-1.1%2Bdeb8u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17q4-65b3-mbbg
1
vulnerability VCID-6kef-2azs-xugx
2
vulnerability VCID-6zv5-sn2d-ffa6
3
vulnerability VCID-73rz-xdrz-ryez
4
vulnerability VCID-8yrv-hee2-9qdc
5
vulnerability VCID-c26f-t6bh-fkc6
6
vulnerability VCID-cbu1-85d6-5bhz
7
vulnerability VCID-fn5e-rmve-c3f4
8
vulnerability VCID-gw9f-rc1s-8udd
9
vulnerability VCID-jczb-y4fh-xucn
10
vulnerability VCID-jzn6-bzzf-nugp
11
vulnerability VCID-pcah-e3hh-gbd7
12
vulnerability VCID-tc5c-pyzn-ekh1
13
vulnerability VCID-u7k3-9pb6-nqa8
14
vulnerability VCID-wwz1-zb24-7qgy
15
vulnerability VCID-xeeh-rpu9-63g6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/proftpd-dfsg@1.3.5-1.1%252Bdeb8u2
References
0
reference_url http://bugs.proftpd.org/show_bug.cgi?id=4230
reference_id
reference_type
scores
url http://bugs.proftpd.org/show_bug.cgi?id=4230
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2016-05/msg00080.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-05/msg00080.html
5
reference_url http://lists.opensuse.org/opensuse-updates/2016-06/msg00045.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-updates/2016-06/msg00045.html
6
reference_url http://proftpd.org/docs/NEWS-1.3.5b
reference_id
reference_type
scores
url http://proftpd.org/docs/NEWS-1.3.5b
7
reference_url http://proftpd.org/docs/NEWS-1.3.6rc2
reference_id
reference_type
scores
url http://proftpd.org/docs/NEWS-1.3.6rc2
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3125
reference_id
reference_type
scores
0
value 0.01371
scoring_system epss
scoring_elements 0.80251
published_at 2026-04-16T12:55:00Z
1
value 0.01371
scoring_system epss
scoring_elements 0.80223
published_at 2026-04-13T12:55:00Z
2
value 0.01371
scoring_system epss
scoring_elements 0.80171
published_at 2026-04-01T12:55:00Z
3
value 0.01371
scoring_system epss
scoring_elements 0.80178
published_at 2026-04-02T12:55:00Z
4
value 0.01371
scoring_system epss
scoring_elements 0.80198
published_at 2026-04-04T12:55:00Z
5
value 0.01371
scoring_system epss
scoring_elements 0.80187
published_at 2026-04-07T12:55:00Z
6
value 0.01371
scoring_system epss
scoring_elements 0.80215
published_at 2026-04-08T12:55:00Z
7
value 0.01371
scoring_system epss
scoring_elements 0.80224
published_at 2026-04-09T12:55:00Z
8
value 0.01371
scoring_system epss
scoring_elements 0.80243
published_at 2026-04-11T12:55:00Z
9
value 0.01371
scoring_system epss
scoring_elements 0.80228
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3125
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3125
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3125
10
reference_url http://www.openwall.com/lists/oss-security/2016/03/11/14
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/03/11/14
11
reference_url http://www.openwall.com/lists/oss-security/2016/03/11/3
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2016/03/11/3
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818492
reference_id 818492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818492
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*
reference_id cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*
reference_id cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-3125
reference_id CVE-2016-3125
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-3125
Weaknesses
0
cwe_id 254
name 7PK - Security Features
description Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
1
cwe_id 310
name Cryptographic Issues
description Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
Exploits
Severity_range_score5.0 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-cbu1-85d6-5bhz