Hpreusse

Name of the Vulnerable Software and Affected Versions: ProFTPD versions 1.3.8b and earlier Description: The issue is related to supplemental group inheritance, which grants unintended access to GID 0 due to the lack of supplemental groups from mod sql. This could allow attackers to escalate privileges to root level, potentially compromising the entire server. It is estimated that over 7 million services are affected. The vulnerability can be exploited by attackers to gain root access to vulnerable systems. Recommendations: For ProFTPD version 1.3.8b and earlier, update to a version that includes the fix for this issue, which is available after the update cec01cc. As a temporary workaround, consider restricting access to the vulnerable mod sql module until a patch is available.