PT-2009-1010 · Proftpd+1 · Proftpd+1

Jan Lieskovsky · Published 2009-02-12 · Updated 2015-05-21 · CVE-2012-6095

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.5rc1

Description The issue is caused by a race condition when handling the MKD and XMKD FTP commands, allowing local users to modify the ownership of arbitrary files via a symlink attack. This can lead to a violation of protected information integrity. The security issue can be exploited by malicious, local users to gain escalated privileges, requiring the UserOwner directive.

Recommendations For ProFTPD versions prior to 1.3.5rc1, update to version 1.3.5rc1 or later to resolve the issue. As a temporary workaround, consider disabling the UserOwner directive until a patch is available. Restrict access to the MKD and XMKD commands to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2015-1457

BDU:2015-02003

CVE-2012-6095

DSA-2606-1

Affected Products

Alt Linux

Proftpd

References · 17

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6095 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4359 · Security Note
• http://debian.org/security/2013/dsa-2606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6095 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-6095 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6095 · Vendor Advisory
• http://secunia.com/advisories/51823 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02003 · Security Note
• https://osv.dev/vulnerability/CVE-2012-6095 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1457 · Vendor Advisory
• http://debian.org/security/dsa-2606 · Note
• http://kingcope.wordpress.com/2013/09/11/proftpd-mod_sftpmod_sftp_pam-invalid-pool-allocation-in-kbdint-authentication · Note
• https://packages.altlinux.org/ru/vuln/CVE-2012-6095 · Note
• http://openwall.com/lists/oss-security/2013/09/17/6 · Note
• http://proftpd.org/docs/NEWS-1.3.5rc1 · Note