Bkbll

**Name of the Vulnerable Software and Affected Versions** Serv-U ftp versions prior to 5.0.0.4 **Description** The issue allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command, which is a result of a buffer overflow. **Recommendations** For versions prior to 5.0.0.4, update to version 5.0.0.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ProFTPD versions 1.2.7 through 1.2.9rc2 **Description** The issue allows remote attackers to execute arbitrary code via a buffer overflow when transferring files in ASCII mode, due to improper translation of newline characters. **Recommendations** For ProFTPD versions 1.2.7 through 1.2.9rc2, consider updating to a version that properly handles newline characters in ASCII mode to prevent buffer overflow attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.