CVE-2011-1137

CVE-2011-1137 describes an integer overflow vulnerability in the mod_sftp module of ProFTPD versions 1.3.3d and earlier. This flaw allows remote, unauthenticated attackers to trigger a denial of service by sending a malformed SSH message, leading to excessive memory consumption and an OOM kill. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial availability impact. While there is no evidence of active exploitation in the wild, a Proof-of-Concept exploit is publicly available on ExploitDB, though it lacks Metasploit or Nuclei modules and has received minimal community or media attention.