PT-2021-30863 · Proftpd+1 · Proftpd+1

Published 2021-09-23 · Updated 2021-09-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions proftpd (affected versions not specified)

Description The issue concerns a memory disclosure to RADIUS servers by mod radius. Additionally, there is a problem with FTP clients like Filezilla failing to detect locale settings in logs, resulting in the message "Status: Server does not support non-ASCII characters." This issue arises from the proftpd MultilineRFC2228 directive being enabled by default, which prevents Filezilla from correctly enabling UTF-8 options. Without this directive, Filezilla can enable UTF-8 options correctly.

Recommendations Disable the MultilineRFC2228 directive to fix the issue.

Related Identifiers

MGASA-2021-0434

Affected Products

Filezilla

Proftpd

References · 6

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/K3JL66LCDUIASS4TM7SY6R2D7W2WBXUE · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0434 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0434.html · Security Note
• https://github.com/proftpd/proftpd/issues/1085 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2001690 · Note
• https://bugs.mageia.org/show_bug.cgi?id=29449 · Note