PT-2005-3304 · Proftpd · Proftpd

Publicado 2005-07-27 · Atualizado 2016-10-18 · CVE-2005-2390

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.0rc2

Description The issue allows attackers to cause a denial of service or obtain sensitive information. This can be achieved via certain inputs to the shutdown message from ftpshut, or the SQLShowInfo mod sql directive.

Recommendations For versions prior to 1.3.0rc2, update to version 1.3.0rc2 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod sql directive and limiting inputs to the shutdown message from ftpshut to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2390

DSA-795-2

Produtos afetados

Proftpd

Referências · 8

• http://securitylab.ru/56189.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2390 · Nota de Segurança
• http://securityfocus.com/bid/14381 · Nota
• http://secunia.com/advisories/16181 · Aviso do Fabricante
• http://proftpd.org/docs/RELEASE_NOTES-1.3.0rc2 · Nota
• http://securityfocus.com/bid/14380 · Nota
• http://debian.org/security/2005/dsa-795 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112604373503912&w=2 · Aviso do Fabricante