{"bulletinFamily": "unix", "affectedPackage": [{"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.x86_64.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "x86_64", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.s390x.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "s390x", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.i386.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "i386", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.ia64.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "ia64", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.s390.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "s390", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.src.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "any", "OSVersion": "3"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.src.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "any", "OSVersion": "3"}], "viewCount": 2, "reporter": "CentOS Project", "references": ["https://rhn.redhat.com/errata/RHSA-2008-0579.html", "http://pasi.pirhonen.eu/", "http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B"], "description": "**CentOS Errata and Security Advisory** CESA-2008:0579\n\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\nserver for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory leak\non an invalid authentication attempt. Since vsftpd prior to version 2.0.5\nallows any number of invalid attempts on the same connection this memory\nleak could lead to an eventual DoS. (CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported patch\nwhich terminates a session after a given number of failed log in attempts.\nThe default number of attempts is 3 and this can be configured using the\n\"max_login_fails\" directive.\n\nAll vsftpd users should upgrade to this updated package, which addresses\nthis vulnerability.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015165.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015166.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015167.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015168.html\n\n**Affected packages:**\nvsftpd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2008-0579.html", "hashmap": [{"key": "affectedPackage", "hash": "12917e91394ee2290e0600347cca65a5"}, {"key": "bulletinFamily", "hash": "4913a9178621eadcdf191db17915fbcb"}, {"key": "cvelist", "hash": "042fa3568ff26e0448c3c1bd852d3804"}, {"key": "cvss", "hash": "bf85ac661e90f76efc3e3b625164c738"}, {"key": "description", "hash": "98a5a75c2af52c50d03699983e3c1296"}, {"key": "href", "hash": "23eaf38bdf52dfa5609d4bcdcb2903f7"}, {"key": "modified", "hash": "503fec2df793509ae4f4c16e1494ab17"}, {"key": "published", "hash": "12f49147ef20e3762754f236c89b1a74"}, {"key": "references", "hash": "009d25907d79f2ebb8e74dd089a42efd"}, {"key": "reporter", "hash": "9855627921475e40e00f92d60af14cb3"}, {"key": "title", "hash": "a127dfb33409f1cd5233d7d2d89e9b09"}, {"key": "type", "hash": "cdc872db616ac66adb3166c75e9ad183"}], "href": "http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html", "modified": "2008-07-26T15:47:21", "objectVersion": "1.3", "enchantments": {"score": {"value": 6.8, "vector": "NONE"}, "vulnersScore": 6.8}, "id": "CESA-2008:0579", "title": "vsftpd security update", "hash": "39c8ea8cb5c11124a79ec88ce55133258b1d759b14391556070279cf320a21f1", "edition": 2, "published": "2008-07-24T22:17:17", "type": "centos", "history": [{"lastseen": "2017-10-03T18:24:26", "bulletin": {"published": "2008-07-24T22:17:17", "enchantments": {}, "id": "CESA-2008:0579", "bulletinFamily": "unix", "title": "vsftpd security update", "affectedPackage": [{"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.s390.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "s390", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.i386.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "i386", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.src.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "any", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.src.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "any", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.ia64.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "ia64", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.x86_64.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "x86_64", "OSVersion": "any"}, {"OS": "CentOS", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.s390x.rpm", "packageName": "vsftpd", "operator": "lt", "arch": "s390x", "OSVersion": "any"}], "hash": "97ce8e0752f968f7ae9cf7ef69cd5ccf1db8675480e664a4483fb0db0901e22e", "viewCount": 0, "edition": 1, "cvelist": ["CVE-2008-2375"], "references": ["https://rhn.redhat.com/errata/RHSA-2008-0579.html", "http://pasi.pirhonen.eu/", "http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B"], "objectVersion": "1.3", "history": [], "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "description": "**CentOS Errata and Security Advisory** CESA-2008:0579\n\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\nserver for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory leak\non an invalid authentication attempt. Since vsftpd prior to version 2.0.5\nallows any number of invalid attempts on the same connection this memory\nleak could lead to an eventual DoS. (CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported patch\nwhich terminates a session after a given number of failed log in attempts.\nThe default number of attempts is 3 and this can be configured using the\n\"max_login_fails\" directive.\n\nAll vsftpd users should upgrade to this updated package, which addresses\nthis vulnerability.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015165.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015166.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015167.html\nhttp://lists.centos.org/pipermail/centos-announce/2008-July/015168.html\n\n**Affected packages:**\nvsftpd\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2008-0579.html", "hashmap": [{"key": "affectedPackage", "hash": "a3e3b0eefe7f5f3894b4864e85b7ba0f"}, {"key": "cvss", "hash": "bf85ac661e90f76efc3e3b625164c738"}, {"key": "published", "hash": "12f49147ef20e3762754f236c89b1a74"}, {"key": "reporter", "hash": "9855627921475e40e00f92d60af14cb3"}, {"key": "href", "hash": "23eaf38bdf52dfa5609d4bcdcb2903f7"}, {"key": "bulletinFamily", "hash": "4913a9178621eadcdf191db17915fbcb"}, {"key": "description", "hash": "98a5a75c2af52c50d03699983e3c1296"}, {"key": "type", "hash": "cdc872db616ac66adb3166c75e9ad183"}, {"key": "title", "hash": "a127dfb33409f1cd5233d7d2d89e9b09"}, {"key": "modified", "hash": "503fec2df793509ae4f4c16e1494ab17"}, {"key": "cvelist", "hash": "042fa3568ff26e0448c3c1bd852d3804"}, {"key": "references", "hash": "009d25907d79f2ebb8e74dd089a42efd"}], "href": "http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html", "modified": "2008-07-26T15:47:21", "lastseen": "2017-10-03T18:24:26", "reporter": "CentOS Project", "type": "centos"}, "differentElements": ["affectedPackage"], "edition": 1}], "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "cvelist": ["CVE-2008-2375"], "lastseen": "2017-10-12T14:46:18"}

{"cve": [{"lastseen": "2018-10-12T11:33:46", "references": ["http://www.vupen.com/english/advisories/2008/2820", "http://www.securityfocus.com/bid/30364", "http://www.securitytracker.com/id?1020546", "https://bugzilla.redhat.com/attachment.cgi?id=201051", "https://issues.rpath.com/browse/RPL-2640", "http://www.openwall.com/lists/oss-security/2008/06/30/2", "http://support.avaya.com/elmodocs2/security/ASA-2008-398.htm", "http://wiki.rpath.com/Advisories:rPSA-2008-0217", "http://www.securityfocus.com/archive/1/494081/100/0/threaded", "http://www.redhat.com/support/errata/RHSA-2008-0680.html", "http://www.redhat.com/support/errata/RHSA-2008-0579.html"], "description": "Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.", "edition": 3, "reporter": "NVD", "published": "2008-07-08T20:41:00", "title": "CVE-2008-2375", "type": "cve", "enchantments": {"score": {"modified": "2018-10-12T11:33:46", "vector": "NONE", "value": 5.0}}, "assessment": {"system": "http://oval.mitre.org/XMLSchema/oval-definitions-5", "name": "oval:org.mitre.oval:def:10138", "href": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10138"}, "bulletinFamily": "NVD", "cvelist": ["CVE-2008-2375"], "scanner": [{"system": "http://oval.mitre.org/XMLSchema/oval-definitions-5", "name": "oval:org.mitre.oval:def:10138", "href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10138"}], "modified": "2018-10-11T16:41:12", "cpe": ["cpe:/a:redhat:vsftpd:2.0.4", "cpe:/a:redhat:vsftpd:2.0.1", "cpe:/a:redhat:vsftpd:0.0.9", "cpe:/a:redhat:vsftpd:0.0.6", "cpe:/a:redhat:vsftpd:0.0.2", "cpe:/a:redhat:vsftpd:2.0.3", "cpe:/a:redhat:vsftpd:0.0.7", "cpe:/a:redhat:vsftpd:2.0.2", "cpe:/a:redhat:vsftpd:1.1.0", "cpe:/a:redhat:vsftpd:1.1.2", "cpe:/a:redhat:vsftpd:0.0.14", "cpe:/a:redhat:vsftpd:1.2.0", "cpe:/a:redhat:vsftpd:0.0.5", "cpe:/a:redhat:vsftpd:0.0.13", "cpe:/a:redhat:vsftpd:0.0.3", "cpe:/a:redhat:vsftpd:1.2.2", "cpe:/a:redhat:vsftpd:0.0.10", "cpe:/a:redhat:vsftpd:1.2.1", "cpe:/a:redhat:vsftpd:0.9.3", "cpe:/a:redhat:vsftpd:0.9.0", "cpe:/a:redhat:vsftpd:0.9.1", "cpe:/a:redhat:vsftpd:2.0.0", "cpe:/a:redhat:vsftpd:0.0.4", "cpe:/a:redhat:vsftpd:1.1.3", "cpe:/a:redhat:vsftpd:0.0.1", "cpe:/a:redhat:vsftpd:0.0.8", "cpe:/a:redhat:vsftpd:0.0.11", "cpe:/a:redhat:vsftpd:0.0.12", "cpe:/a:redhat:vsftpd:0.0.15", "cpe:/a:redhat:vsftpd:0.9.2", "cpe:/a:redhat:vsftpd:1.1.1"], "id": "CVE-2008-2375", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2375", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2017-07-25T10:56:10", "references": ["2008:0579", "http://lists.centos.org/pipermail/centos-announce/2008-July/015166.html"], "pluginID": "880025", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-02-27T00:00:00", "title": "CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-10T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=880025", "id": "OPENVAS:880025", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on CentOS 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2008-July/015166.html\");\n script_id(880025);\n script_version(\"$Revision: 6651 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:45:21 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-02-27 08:40:14 +0100 (Fri, 27 Feb 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"CESA\", value: \"2008:0579\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64\");\n\n script_summary(\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-27T10:56:26", "references": ["2008:0680-01", "https://www.redhat.com/archives/rhsa-announce/2008-July/msg00031.html"], "pluginID": "870152", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-03-06T00:00:00", "title": "RedHat Update for vsftpd RHSA-2008:0680-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 9.3}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-12T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=870152", "id": "OPENVAS:870152", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for vsftpd RHSA-2008:0680-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 4 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n This package also addresses the following bugs:\n \n * when uploading unique files, a bug in vsftpd caused the file to be saved\n with a suffix '.1' even when no previous file with that name existed. This\n issues is resolved in this package.\n \n * when vsftpd was run through the init script, it was possible for the init\n script to print an 'OK' message, even though the vsftpd may not have\n started. The init script no longer produces a false verification with this\n update.\n \n * vsftpd only supported usernames with a maximum length of 32 characters.\n The updated package now supports usernames up to 128 characters long.\n \n * a system flaw meant vsftpd output could become dependent on the timing or\n sequence of other events, even when the &quot;lock_upload_files&quot; option was set.\n If a file, filename.ext, was being uploaded and a second transfer of the\n file, filename.ext, was started before the first transfer was finished, the\n resultant uploaded file was a corrupt concatenation of the latter upload\n and the tail of the earlier upload. With this updated package, vsftpd\n allows the earlier upload to complete before overwriting with the latter\n upload, fixing the issue.\n \n * the 'lock_upload_files' option was not documented in the manual page. A\n new manual page describing this option is included in this package.\n \n * vsftpd did not support usernames that started with an underscore or a\n period character. These special characters are now allowed at the beginning\n of a username.\n \n * when storing a unique file, vsftpd could cause an error for some clients.\n This is rectified in this package.\n \n * vsftpd init script was found to not be Linux Standards Base compliant.\n This update corrects their exit codes to conform to the standard.\n \n All vsftpd users are advised to upgrade to this updated package, which\n resolves these issues.\";\n\ntag_affected = \"vsftpd on Red Hat Enterprise Linux AS version 4,\n Red Hat Enterprise Linux ES version 4\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2008-July/msg00031.html\");\n script_id(870152);\n script_version(\"$Revision: 6683 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-12 11:41:57 +0200 (Wed, 12 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-03-06 07:30:35 +0100 (Fri, 06 Mar 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"RHSA\", value: \"2008:0680-01\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"RedHat Update for vsftpd RHSA-2008:0680-01\");\n\n script_summary(\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_4\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~2.0.1~6.el4\", rls:\"RHENT_4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"vsftpd-debuginfo\", rpm:\"vsftpd-debuginfo~2.0.1~6.el4\", rls:\"RHENT_4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-25T10:56:49", "references": ["http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html", "2008:0579"], "pluginID": "880293", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-02-27T00:00:00", "title": "CentOS Update for vsftpd CESA-2008:0579 centos3 i386", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-10T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=880293", "id": "OPENVAS:880293", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for vsftpd CESA-2008:0579 centos3 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on CentOS 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html\");\n script_id(880293);\n script_version(\"$Revision: 6651 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:45:21 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-02-27 08:40:14 +0100 (Fri, 27 Feb 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"CESA\", value: \"2008:0579\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"CentOS Update for vsftpd CESA-2008:0579 centos3 i386\");\n\n script_summary(\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-26T08:56:11", "references": [], "pluginID": "65857", "description": "The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\n\nMore details may also be found by searching for the SuSE\nEnterprise Server 10 patch database located at\nhttp://download.novell.com/patch/finder/", "edition": 2, "reporter": "Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com", "published": "2009-10-13T00:00:00", "title": "SLES10: Security update for vsftpd", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=65857", "id": "OPENVAS:65857", "sourceData": "#\n#VID slesp2-vsftpd-5388\n# OpenVAS Vulnerability Test\n# $\n# Description: Security update for vsftpd\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisories, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\n\nMore details may also be found by searching for the SuSE\nEnterprise Server 10 patch database located at\nhttp://download.novell.com/patch/finder/\";\n\ntag_solution = \"Please install the updates provided by SuSE.\";\n\nif(description)\n{\n script_id(65857);\n script_version(\"$Revision: 6666 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-11 15:13:36 +0200 (Tue, 11 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-10-13 18:25:40 +0200 (Tue, 13 Oct 2009)\");\n script_cve_id(\"CVE-2008-2375\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_name(\"SLES10: Security update for vsftpd\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse_sles\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~2.0.4~19.18\", rls:\"SLES10.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-04-06T11:39:23", "references": [], "pluginID": "136141256231065225", "description": "The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5034480 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/", "edition": 1, "reporter": "Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com", "published": "2009-10-10T00:00:00", "type": "openvas", "title": "SLES9: Security update for vsftpd", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231065225", "id": "OPENVAS:136141256231065225", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: sles9p5034480.nasl 9350 2018-04-06 07:03:33Z cfischer $\n# Description: Security update for vsftpd\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5034480 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/\";\n\ntag_solution = \"Please install the updates provided by SuSE.\";\n \nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.65225\");\n script_version(\"$Revision: 9350 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:03:33 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-10-10 16:11:46 +0200 (Sat, 10 Oct 2009)\");\n script_cve_id(\"CVE-2008-2375\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_name(\"SLES9: Security update for vsftpd\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse_sles\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~2.0.4~0.5\", rls:\"SLES9.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-04-09T11:40:47", "references": ["2008:0579-01", "https://www.redhat.com/archives/rhsa-announce/2008-July/msg00029.html"], "pluginID": "1361412562310870032", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-03-06T00:00:00", "title": "RedHat Update for vsftpd RHSA-2008:0579-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310870032", "id": "OPENVAS:1361412562310870032", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for vsftpd RHSA-2008:0579-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on Red Hat Enterprise Linux AS version 3,\n Red Hat Enterprise Linux ES version 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2008-July/msg00029.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.870032\");\n script_version(\"$Revision: 9370 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 10:53:14 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-03-06 07:30:35 +0100 (Fri, 06 Mar 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"RHSA\", value: \"2008:0579-01\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"RedHat Update for vsftpd RHSA-2008:0579-01\");\n\n script_tag(name:\"summary\", value:\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"RHENT_3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"vsftpd-debuginfo\", rpm:\"vsftpd-debuginfo~1.2.1~3E.16\", rls:\"RHENT_3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-04-09T11:38:54", "references": ["2008:0579", "http://lists.centos.org/pipermail/centos-announce/2008-July/015166.html"], "pluginID": "1361412562310880025", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-02-27T00:00:00", "title": "CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310880025", "id": "OPENVAS:1361412562310880025", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on CentOS 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2008-July/015166.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.880025\");\n script_version(\"$Revision: 9370 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 10:53:14 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-02-27 08:40:14 +0100 (Fri, 27 Feb 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"CESA\", value: \"2008:0579\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"CentOS Update for vsftpd CESA-2008:0579 centos3 x86_64\");\n\n script_tag(name:\"summary\", value:\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-26T08:55:55", "references": [], "pluginID": "65225", "description": "The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5034480 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/", "edition": 2, "reporter": "Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com", "published": "2009-10-10T00:00:00", "title": "SLES9: Security update for vsftpd", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=65225", "id": "OPENVAS:65225", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: sles9p5034480.nasl 6666 2017-07-11 13:13:36Z cfischer $\n# Description: Security update for vsftpd\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates to packages that affect\nthe security of your system. One or more of the following packages\nare affected:\n\n vsftpd\n\nFor more information, please visit the referenced security\nadvisories.\n\nMore details may also be found by searching for keyword\n5034480 within the SuSE Enterprise Server 9 patch\ndatabase at http://download.novell.com/patch/finder/\";\n\ntag_solution = \"Please install the updates provided by SuSE.\";\n \nif(description)\n{\n script_id(65225);\n script_version(\"$Revision: 6666 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-11 15:13:36 +0200 (Tue, 11 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-10-10 16:11:46 +0200 (Sat, 10 Oct 2009)\");\n script_cve_id(\"CVE-2008-2375\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_name(\"SLES9: Security update for vsftpd\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse_sles\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~2.0.4~0.5\", rls:\"SLES9.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-07-27T10:56:27", "references": ["2008:0579-01", "https://www.redhat.com/archives/rhsa-announce/2008-July/msg00029.html"], "pluginID": "870032", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-03-06T00:00:00", "title": "RedHat Update for vsftpd RHSA-2008:0579-01", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2017-07-12T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=870032", "id": "OPENVAS:870032", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for vsftpd RHSA-2008:0579-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on Red Hat Enterprise Linux AS version 3,\n Red Hat Enterprise Linux ES version 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2008-July/msg00029.html\");\n script_id(870032);\n script_version(\"$Revision: 6683 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-12 11:41:57 +0200 (Wed, 12 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-03-06 07:30:35 +0100 (Fri, 06 Mar 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"RHSA\", value: \"2008:0579-01\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"RedHat Update for vsftpd RHSA-2008:0579-01\");\n\n script_summary(\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"RHENT_3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"vsftpd-debuginfo\", rpm:\"vsftpd-debuginfo~1.2.1~3E.16\", rls:\"RHENT_3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-04-09T11:40:41", "references": ["http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html", "2008:0579"], "pluginID": "1361412562310880293", "description": "Check for the Version of vsftpd", "edition": 2, "reporter": "Copyright (C) 2009 Greenbone Networks GmbH", "published": "2009-02-27T00:00:00", "type": "openvas", "title": "CentOS Update for vsftpd CESA-2008:0579 centos3 i386", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-04-06T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310880293", "id": "OPENVAS:1361412562310880293", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for vsftpd CESA-2008:0579 centos3 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\n server for Linux and Unix-like systems.\n\n The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\n combination with Pluggable Authentication Modules (PAM) had a memory leak\n on an invalid authentication attempt. Since vsftpd prior to version 2.0.5\n allows any number of invalid attempts on the same connection this memory\n leak could lead to an eventual DoS. (CVE-2008-2375)\n \n This update mitigates this security issue by including a backported patch\n which terminates a session after a given number of failed log in attempts.\n The default number of attempts is 3 and this can be configured using the\n &quot;max_login_fails&quot; directive.\n \n All vsftpd users should upgrade to this updated package, which addresses\n this vulnerability.\";\n\ntag_affected = \"vsftpd on CentOS 3\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2008-July/015165.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.880293\");\n script_version(\"$Revision: 9370 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 10:53:14 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-02-27 08:40:14 +0100 (Fri, 27 Feb 2009)\");\n script_tag(name:\"cvss_base\", value:\"7.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_xref(name: \"CESA\", value: \"2008:0579\");\n script_cve_id(\"CVE-2008-2375\");\n script_name( \"CentOS Update for vsftpd CESA-2008:0579 centos3 i386\");\n\n script_tag(name:\"summary\", value:\"Check for the Version of vsftpd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"vsftpd\", rpm:\"vsftpd~1.2.1~3E.16\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2019-01-16T20:09:48", "references": ["http://support.novell.com/security/cve/CVE-2008-2375.html"], "pluginID": "41220", "description": "This update of vsftpd fixes a memory leak that can occur during\nauthentication. (CVE-2008-2375) Additionally non-security bugs for\nSLES10 were fixed. There were some issues with simultaneous FTP PUT of\nthe same file name that lead to a corrupted file on the server.", "edition": 5, "reporter": "Tenable", "published": "2009-09-24T00:00:00", "title": "SuSE9 Security Update : vsftpd (YOU Patch Number 12192)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2012-04-23T00:00:00", "cpe": ["cpe:/o:suse:suse_linux"], "id": "SUSE9_12192.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=41220", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The text description of this plugin is (C) Novell, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(41220);\n script_version(\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2012/04/23 18:14:42 $\");\n\n script_cve_id(\"CVE-2008-2375\");\n\n script_name(english:\"SuSE9 Security Update : vsftpd (YOU Patch Number 12192)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SuSE 9 host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update of vsftpd fixes a memory leak that can occur during\nauthentication. (CVE-2008-2375) Additionally non-security bugs for\nSLES10 were fixed. There were some issues with simultaneous FTP PUT of\nthe same file name that lead to a corrupted file on the server.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://support.novell.com/security/cve/CVE-2008-2375.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Apply YOU patch number 12192.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:suse:suse_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/04\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2009/09/24\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2009-2012 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) exit(0, \"Local checks are not enabled.\");\nif (!get_kb_item(\"Host/SuSE/release\")) exit(0, \"The host is not running SuSE.\");\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) exit(1, \"Could not obtain the list of installed packages.\");\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) exit(1, \"Failed to determine the architecture type.\");\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") exit(1, \"Local checks for SuSE 9 on the '\"+cpu+\"' architecture have not been implemented.\");\n\n\nflag = 0;\nif (rpm_check(release:\"SUSE9\", reference:\"vsftpd-2.0.4-0.5\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse exit(0, \"The host is not affected.\");\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:08:29", "references": ["http://www.nessus.org/u?3bab6738", "http://www.nessus.org/u?9aca300e", "http://www.nessus.org/u?05ac50c3"], "pluginID": "33736", "description": "An updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.", "edition": 8, "reporter": "Tenable", "published": "2008-07-28T00:00:00", "title": "CentOS 3 : vsftpd (CESA-2008:0579)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "CentOS Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-11-10T00:00:00", "cpe": ["p-cpe:/a:centos:centos:vsftpd", "cpe:/o:centos:centos:3"], "id": "CENTOS_RHSA-2008-0579.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=33736", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2008:0579 and \n# CentOS Errata and Security Advisory 2008:0579 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(33736);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2018/11/10 11:49:28\");\n\n script_cve_id(\"CVE-2008-2375\");\n script_xref(name:\"RHSA\", value:\"2008:0579\");\n\n script_name(english:\"CentOS 3 : vsftpd (CESA-2008:0579)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2008-July/015165.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?3bab6738\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2008-July/015166.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?05ac50c3\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2008-July/015167.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9aca300e\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:vsftpd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2008/07/28\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2008-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/CentOS/release\")) audit(AUDIT_OS_NOT, \"CentOS\");\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-3\", reference:\"vsftpd-1.2.1-3E.16\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:14:13", "references": ["http://www.nessus.org/u?bf88d642"], "pluginID": "60456", "description": "The version of vsftpd as shipped in Red Hat Enterprise Linux 4 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nThis package also addresses the following bugs :\n\n - when uploading unique files, a bug in vsftpd caused the\n file to be saved with a suffix '.1' even when no\n previous file with that name existed. This issues is\n resolved in this package.\n\n - when vsftpd was run through the init script, it was\n possible for the init script to print an 'OK' message,\n even though the vsftpd may not have started. The init\n script no longer produces a false verification with this\n update.\n\n - vsftpd only supported usernames with a maximum length of\n 32 characters. The updated package now supports\n usernames up to 128 characters long.\n\n - a system flaw meant vsftpd output could become dependent\n on the timing or sequence of other events, even when the\n 'lock_upload_files' option was set. If a file,\n filename.ext, was being uploaded and a second transfer\n of the file, filename.ext, was started before the first\n transfer was finished, the resultant uploaded file was a\n corrupt concatenation of the latter upload and the tail\n of the earlier upload. With this updated package, vsftpd\n allows the earlier upload to complete before overwriting\n with the latter upload, fixing the issue.\n\n - the 'lock_upload_files' option was not documented in the\n manual page. A new manual page describing this option is\n included in this package.\n\n - vsftpd did not support usernames that started with an\n underscore or a period character. These special\n characters are now allowed at the beginning of a\n username.\n\n - when storing a unique file, vsftpd could cause an error\n for some clients. This is rectified in this package.\n\n - vsftpd init script was found to not be Linux Standards\n Base compliant. This update corrects their exit codes to\n conform to the standard.", "edition": 6, "reporter": "Tenable", "published": "2012-08-01T00:00:00", "title": "Scientific Linux Security Update : vsftpd on SL4.x i386/x86_64", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "naslFamily": "Scientific Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2019-01-07T00:00:00", "cpe": ["x-cpe:/o:fermilab:scientific_linux"], "id": "SL_20080724_VSFTPD_ON_SL4_X.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=60456", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(60456);\n script_version(\"1.2\");\n script_cvs_date(\"Date: 2019/01/07 9:52:18\");\n\n script_cve_id(\"CVE-2008-2375\");\n\n script_name(english:\"Scientific Linux Security Update : vsftpd on SL4.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Scientific Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The version of vsftpd as shipped in Red Hat Enterprise Linux 4 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nThis package also addresses the following bugs :\n\n - when uploading unique files, a bug in vsftpd caused the\n file to be saved with a suffix '.1' even when no\n previous file with that name existed. This issues is\n resolved in this package.\n\n - when vsftpd was run through the init script, it was\n possible for the init script to print an 'OK' message,\n even though the vsftpd may not have started. The init\n script no longer produces a false verification with this\n update.\n\n - vsftpd only supported usernames with a maximum length of\n 32 characters. The updated package now supports\n usernames up to 128 characters long.\n\n - a system flaw meant vsftpd output could become dependent\n on the timing or sequence of other events, even when the\n 'lock_upload_files' option was set. If a file,\n filename.ext, was being uploaded and a second transfer\n of the file, filename.ext, was started before the first\n transfer was finished, the resultant uploaded file was a\n corrupt concatenation of the latter upload and the tail\n of the earlier upload. With this updated package, vsftpd\n allows the earlier upload to complete before overwriting\n with the latter upload, fixing the issue.\n\n - the 'lock_upload_files' option was not documented in the\n manual page. A new manual page describing this option is\n included in this package.\n\n - vsftpd did not support usernames that started with an\n underscore or a period character. These special\n characters are now allowed at the beginning of a\n username.\n\n - when storing a unique file, vsftpd could cause an error\n for some clients. This is rectified in this package.\n\n - vsftpd init script was found to not be Linux Standards\n Base compliant. This update corrects their exit codes to\n conform to the standard.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0807&L=scientific-linux-errata&T=0&P=2744\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bf88d642\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL4\", reference:\"vsftpd-2.0.1-6.el4\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:08:32", "references": ["http://support.novell.com/security/cve/CVE-2008-2375.html"], "pluginID": "34079", "description": "This update of vsftpd fixes a memory leak that can occur during\nauthentication. (CVE-2008-2375) Additionally non-security bugs for\nSLES10 were fixed. There were some issues with simultaneous FTP PUT of\nthe same file name that lead to a corrupted file on the server.", "edition": 5, "reporter": "Tenable", "published": "2008-09-03T00:00:00", "title": "SuSE 10 Security Update : vsftpd (ZYPP Patch Number 5388)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2012-05-17T00:00:00", "cpe": ["cpe:/o:suse:suse_linux"], "id": "SUSE_VSFTPD-5388.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=34079", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The text description of this plugin is (C) Novell, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(34079);\n script_version (\"$Revision: 1.11 $\");\n script_cvs_date(\"$Date: 2012/05/17 11:27:19 $\");\n\n script_cve_id(\"CVE-2008-2375\");\n\n script_name(english:\"SuSE 10 Security Update : vsftpd (ZYPP Patch Number 5388)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SuSE 10 host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update of vsftpd fixes a memory leak that can occur during\nauthentication. (CVE-2008-2375) Additionally non-security bugs for\nSLES10 were fixed. There were some issues with simultaneous FTP PUT of\nthe same file name that lead to a corrupted file on the server.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://support.novell.com/security/cve/CVE-2008-2375.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Apply ZYPP patch number 5388.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:suse:suse_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/01\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2008/09/03\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2008-2012 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) exit(0, \"Local checks are not enabled.\");\nif (!get_kb_item(\"Host/SuSE/release\")) exit(0, \"The host is not running SuSE.\");\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) exit(1, \"Could not obtain the list of installed packages.\");\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) exit(1, \"Failed to determine the architecture type.\");\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") exit(1, \"Local checks for SuSE 10 on the '\"+cpu+\"' architecture have not been implemented.\");\n\n\nflag = 0;\nif (rpm_check(release:\"SLES10\", sp:1, reference:\"vsftpd-2.0.4-19.18\")) flag++;\nif (rpm_check(release:\"SLES10\", sp:2, reference:\"vsftpd-2.0.4-19.18\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse exit(0, \"The host is not affected.\");\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:16:29", "references": ["https://oss.oracle.com/pipermail/el-errata/2008-July/000694.html"], "pluginID": "67721", "description": "From Red Hat Security Advisory 2008:0579 :\n\nAn updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.", "edition": 6, "reporter": "Tenable", "published": "2013-07-12T00:00:00", "title": "Oracle Linux 3 : vsftpd (ELSA-2008-0579)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Oracle Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-08-13T00:00:00", "cpe": ["p-cpe:/a:oracle:linux:vsftpd", "cpe:/o:oracle:linux:3"], "id": "ORACLELINUX_ELSA-2008-0579.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=67721", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2008:0579 and \n# Oracle Linux Security Advisory ELSA-2008-0579 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(67721);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/08/13 14:32:37\");\n\n script_cve_id(\"CVE-2008-2375\");\n script_xref(name:\"RHSA\", value:\"2008:0579\");\n\n script_name(english:\"Oracle Linux 3 : vsftpd (ELSA-2008-0579)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2008:0579 :\n\nAn updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2008-July/000694.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:vsftpd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = eregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 3\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"vsftpd-1.2.1-3E.16\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"vsftpd-1.2.1-3E.16\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"vsftpd\");\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:14:13", "references": ["http://www.nessus.org/u?4adffd3f"], "pluginID": "60455", "description": "The version of vsftpd as shipped in Scientific Linux 3 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory\nleak on an invalid authentication attempt. Since vsftpd prior to\nversion 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.", "edition": 6, "reporter": "Tenable", "published": "2012-08-01T00:00:00", "title": "Scientific Linux Security Update : vsftpd on SL3.x i386/x86_64", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "naslFamily": "Scientific Linux Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2019-01-07T00:00:00", "cpe": ["x-cpe:/o:fermilab:scientific_linux"], "id": "SL_20080724_VSFTPD_ON_SL3_X.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=60455", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(60455);\n script_version(\"1.2\");\n script_cvs_date(\"Date: 2019/01/07 9:52:18\");\n\n script_cve_id(\"CVE-2008-2375\");\n\n script_name(english:\"Scientific Linux Security Update : vsftpd on SL3.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Scientific Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The version of vsftpd as shipped in Scientific Linux 3 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory\nleak on an invalid authentication attempt. Since vsftpd prior to\nversion 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0807&L=scientific-linux-errata&T=0&P=2270\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4adffd3f\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL3\", reference:\"vsftpd-1.2.1-3E.16\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:08:28", "references": ["https://access.redhat.com/security/cve/cve-2008-2375", "https://access.redhat.com/errata/RHSA-2008:0579"], "pluginID": "33580", "description": "An updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.", "edition": 9, "reporter": "Tenable", "published": "2008-07-25T00:00:00", "title": "RHEL 3 : vsftpd (RHSA-2008:0579)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-11-27T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:3", "p-cpe:/a:redhat:enterprise_linux:vsftpd"], "id": "REDHAT-RHSA-2008-0579.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=33580", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2008:0579. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(33580);\n script_version (\"1.19\");\n script_cvs_date(\"Date: 2018/11/27 13:31:32\");\n\n script_cve_id(\"CVE-2008-2375\");\n script_xref(name:\"RHSA\", value:\"2008:0579\");\n\n script_name(english:\"RHEL 3 : vsftpd (RHSA-2008:0579)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated vsftpd package that fixes a security issue is now\navailable.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nAll vsftpd users should upgrade to this updated package, which\naddresses this vulnerability.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2008-2375\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2008:0579\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:vsftpd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2008/07/25\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2008-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^3([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2008:0579\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL3\", reference:\"vsftpd-1.2.1-3E.16\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"vsftpd\");\n }\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2019-01-16T20:08:28", "references": ["https://access.redhat.com/security/cve/cve-2008-2375", "https://access.redhat.com/errata/RHSA-2008:0680"], "pluginID": "33582", "description": "An updated vsftpd package that fixes a security issue and various bugs\nis now available.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 4 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nThis package also addresses the following bugs :\n\n* when uploading unique files, a bug in vsftpd caused the file to be\nsaved with a suffix '.1' even when no previous file with that name\nexisted. This issues is resolved in this package.\n\n* when vsftpd was run through the init script, it was possible for the\ninit script to print an 'OK' message, even though the vsftpd may not\nhave started. The init script no longer produces a false verification\nwith this update.\n\n* vsftpd only supported usernames with a maximum length of 32\ncharacters. The updated package now supports usernames up to 128\ncharacters long.\n\n* a system flaw meant vsftpd output could become dependent on the\ntiming or sequence of other events, even when the 'lock_upload_files'\noption was set. If a file, filename.ext, was being uploaded and a\nsecond transfer of the file, filename.ext, was started before the\nfirst transfer was finished, the resultant uploaded file was a corrupt\nconcatenation of the latter upload and the tail of the earlier upload.\nWith this updated package, vsftpd allows the earlier upload to\ncomplete before overwriting with the latter upload, fixing the issue.\n\n* the 'lock_upload_files' option was not documented in the manual\npage. A new manual page describing this option is included in this\npackage.\n\n* vsftpd did not support usernames that started with an underscore or\na period character. These special characters are now allowed at the\nbeginning of a username.\n\n* when storing a unique file, vsftpd could cause an error for some\nclients. This is rectified in this package.\n\n* vsftpd init script was found to not be Linux Standards Base\ncompliant. This update corrects their exit codes to conform to the\nstandard.\n\nAll vsftpd users are advised to upgrade to this updated package, which\nresolves these issues.", "edition": 9, "reporter": "Tenable", "published": "2008-07-25T00:00:00", "title": "RHEL 4 : vsftpd (RHSA-2008:0680)", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "naslFamily": "Red Hat Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2008-2375"], "modified": "2018-11-27T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:4", "p-cpe:/a:redhat:enterprise_linux:vsftpd"], "id": "REDHAT-RHSA-2008-0680.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=33582", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2008:0680. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(33582);\n script_version (\"1.19\");\n script_cvs_date(\"Date: 2018/11/27 13:31:32\");\n\n script_cve_id(\"CVE-2008-2375\");\n script_xref(name:\"RHSA\", value:\"2008:0680\");\n\n script_name(english:\"RHEL 4 : vsftpd (RHSA-2008:0680)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated vsftpd package that fixes a security issue and various bugs\nis now available.\n\nThis update has been rated as having moderate security impact by the\nRed Hat Security Response Team.\n\nvsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure\nFTP server for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 4 when\nused in combination with Pluggable Authentication Modules (PAM) had a\nmemory leak on an invalid authentication attempt. Since vsftpd prior\nto version 2.0.5 allows any number of invalid attempts on the same\nconnection this memory leak could lead to an eventual DoS.\n(CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported\npatch which terminates a session after a given number of failed log in\nattempts. The default number of attempts is 3 and this can be\nconfigured using the 'max_login_fails' directive.\n\nThis package also addresses the following bugs :\n\n* when uploading unique files, a bug in vsftpd caused the file to be\nsaved with a suffix '.1' even when no previous file with that name\nexisted. This issues is resolved in this package.\n\n* when vsftpd was run through the init script, it was possible for the\ninit script to print an 'OK' message, even though the vsftpd may not\nhave started. The init script no longer produces a false verification\nwith this update.\n\n* vsftpd only supported usernames with a maximum length of 32\ncharacters. The updated package now supports usernames up to 128\ncharacters long.\n\n* a system flaw meant vsftpd output could become dependent on the\ntiming or sequence of other events, even when the 'lock_upload_files'\noption was set. If a file, filename.ext, was being uploaded and a\nsecond transfer of the file, filename.ext, was started before the\nfirst transfer was finished, the resultant uploaded file was a corrupt\nconcatenation of the latter upload and the tail of the earlier upload.\nWith this updated package, vsftpd allows the earlier upload to\ncomplete before overwriting with the latter upload, fixing the issue.\n\n* the 'lock_upload_files' option was not documented in the manual\npage. A new manual page describing this option is included in this\npackage.\n\n* vsftpd did not support usernames that started with an underscore or\na period character. These special characters are now allowed at the\nbeginning of a username.\n\n* when storing a unique file, vsftpd could cause an error for some\nclients. This is rectified in this package.\n\n* vsftpd init script was found to not be Linux Standards Base\ncompliant. This update corrects their exit codes to conform to the\nstandard.\n\nAll vsftpd users are advised to upgrade to this updated package, which\nresolves these issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2008-2375\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2008:0680\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected vsftpd package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C\");\n script_cwe_id(399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:vsftpd\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2008/07/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2008/07/25\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2008-2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^4([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 4.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2008:0680\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL4\", reference:\"vsftpd-2.0.1-6.el4\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"vsftpd\");\n }\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "oraclelinux": [{"lastseen": "2018-08-31T01:46:17", "references": [], "affectedPackage": [{"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "src", "packageFilename": "vsftpd-2.0.1-6.el4.src.rpm", "packageName": "vsftpd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "src", "packageFilename": "vsftpd-2.0.1-6.el4.src.rpm", "packageName": "vsftpd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "src", "packageFilename": "vsftpd-2.0.1-6.el4.src.rpm", "packageName": "vsftpd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "x86_64", "packageFilename": "vsftpd-2.0.1-6.el4.x86_64.rpm", "packageName": "vsftpd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "ia64", "packageFilename": "vsftpd-2.0.1-6.el4.ia64.rpm", "packageName": "vsftpd", "operator": "lt"}, {"OS": "Oracle Linux", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "i386", "packageFilename": "vsftpd-2.0.1-6.el4.i386.rpm", "packageName": "vsftpd", "operator": "lt"}], "description": "[2.0.1-6]\n- add option max_login_fails that kicks the session after few login fails\n- Resolves: #197141\n- fix bad handling of unique files\n- Resolves: #250727\n- increase maximum length of allowed username\n- Resolves: #236326\n- fix create/lock race condition when more clients are uploading to a file\n- Resolves: #240550\n- document lock_upload_files option\n- Resolves: #316381\n- allow usernames to begin with underscore or dot\n- Resolves: #339911\n- dont reply with code 150 two times when uploading files with STOU\n- Resolves: #387021\n- fix memory leak in ls.c\n- Resolves: #408431\n- daemonize correctly and report startup failure correctly\n- Resolves: #206843\n- fix init script\n- Resolves: #431450", "edition": 3, "reporter": "Oracle", "published": "2008-08-01T00:00:00", "title": "vsftpd security and bug fix update", "type": "oraclelinux", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "bulletinFamily": "unix", "cvelist": ["CVE-2008-2375"], "modified": "2008-08-01T00:00:00", "id": "ELSA-2008-0680", "href": "http://linux.oracle.com/errata/ELSA-2008-0680.html", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:09:30", "references": ["https://vulners.com/securityvulns/securityvulns:doc:20147"], "description": "Memory leak on invalid authentication attempt leads to memory exhaustion.", "edition": 1, "reporter": "BUGTRAQ", "published": "2008-07-12T00:00:00", "title": "vsftpd FTP server memory leak", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:09:30", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2008-2375"], "modified": "2008-07-12T00:00:00", "id": "SECURITYVULNS:VULN:9143", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:9143", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-08-31T11:10:26", "references": [], "description": "rPath Security Advisory: 2008-0217-1\r\nPublished: 2008-07-08\r\nProducts:\r\n rPath Linux 1\r\n\r\nRating: Minor\r\nExposure Level Classification:\r\n Remote Non-deterministic Denial of Service\r\nUpdated Versions:\r\n vsftpd=conary.rpath.com@rpl:1/2.0.3-13.4-1\r\n\r\nrPath Issue Tracking System:\r\n https://issues.rpath.com/browse/RPL-2640\r\n\r\nReferences:\r\n http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2375\r\n\r\nDescription:\r\n Previous versions of the vsftpd package are vulnerable to a Denial\r\n of Service attack in which a remote attacker may be able to trigger\r\n excessive memory consumption by performing a large number of invalid\r\n authentication attempts.\r\n\r\nhttp://wiki.rpath.com/Advisories:rPSA-2008-0217\r\n\r\nCopyright 2008 rPath, Inc.\r\nThis file is distributed under the terms of the MIT License.\r\nA copy is available at http://www.rpath.com/permanent/mit-license.html", "edition": 1, "reporter": "Securityvulns", "published": "2008-07-12T00:00:00", "title": "rPSA-2008-0217-1 vsftpd", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:10:26", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2008-2375"], "modified": "2008-07-12T00:00:00", "id": "SECURITYVULNS:DOC:20147", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:20147", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "seebug": [{"lastseen": "2017-11-19T21:33:33", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "enchantments_done": [], "references": [], "description": "BUGTRAQ ID: 30364\r\nCVE ID:CVE-2008-2375\r\nCNCVE ID\uff1aCNCVE-20082375\r\n\r\nvsftpd FTP Server\u662f\u4e00\u6b3e\u5b89\u5168\u6027\u52a0\u5f3a\u7684FTP\u670d\u52a1\u7a0b\u5e8f\u3002\r\nvsftpd FTP Server PAM\u6a21\u5757\u4f7f\u7528\u5b58\u5728\u5185\u5b58\u6cc4\u6f0f\u95ee\u9898\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u5bf9\u670d\u52a1\u7a0b\u5e8f\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\r\nRed Hat Enterprise Linux 3\u7ed1\u5b9a\u53d1\u884c\u7684vsftpd\u7248\u672c\u7ec4\u5408PAM\u4f7f\u7528\u65f6\u4f1a\u7531\u4e8e\u975e\u6cd5\u9a8c\u8bc1\u5c1d\u8bd5\u800c\u5bfc\u81f4\u5185\u5b58\u6cc4\u6f0f\u3002\u56e0\u4e3avsftpd 2.0.5\u4e4b\u524d\u5141\u8bb8\u5728\u540c\u4e00\u8fde\u63a5\u4e0a\u591a\u6b21\u975e\u6cd5\u5c1d\u8bd5\uff0c\u800c\u9020\u6210\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\n\nVsftpd Vsftpd 2.0.5 \r\nRedHat Enterprise Linux ES 4\r\nRedHat Enterprise Linux ES 3\r\nRedHat Enterprise Linux AS 4\r\nRedHat Enterprise Linux AS 3\n \u53ef\u53c2\u8003\u5982\u4e0b\u8865\u4e01\u89e3\u51b3\u65b9\u6848\uff1a\r\n<a href=http://rhn.redhat.com/errata/RHSA-2008-0680.html target=_blank>http://rhn.redhat.com/errata/RHSA-2008-0680.html</a>\r\n<a href=http://rhn.redhat.com/errata/RHSA-2008-0579.html target=_blank>http://rhn.redhat.com/errata/RHSA-2008-0579.html</a>", "reporter": "Root", "published": "2008-07-28T00:00:00", "title": "vsftpd FTP\u670d\u52a1\u5668PAM\u9a8c\u8bc1\u6a21\u5757\u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e", "type": "seebug", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2008-2375"], "_object_type": "robots.models.seebug.SeebugBulletin", "modified": "2008-07-28T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-3721", "id": "SSV:3721", "sourceData": "", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "sourceHref": "", "status": "details"}], "redhat": [{"lastseen": "2018-12-11T17:42:44", "_object_types": ["robots.models.redhat.RedHatBulletin", "robots.models.base.Bulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "4", "packageVersion": "2.0.1-6.el4", "arch": "x86_64", "packageName": "vsftpd", "packageFilename": "vsftpd-2.0.1-6.el4.x86_64.rpm", "operator": "lt"}], "description": "vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\nserver for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 4 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory leak\non an invalid authentication attempt. Since vsftpd prior to version 2.0.5\nallows any number of invalid attempts on the same connection this memory\nleak could lead to an eventual DoS. (CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported patch\nwhich terminates a session after a given number of failed log in attempts.\nThe default number of attempts is 3 and this can be configured using the\n\"max_login_fails\" directive.\n\nThis package also addresses the following bugs:\n\n* when uploading unique files, a bug in vsftpd caused the file to be saved\nwith a suffix '.1' even when no previous file with that name existed. This\nissues is resolved in this package.\n\n* when vsftpd was run through the init script, it was possible for the init\nscript to print an 'OK' message, even though the vsftpd may not have\nstarted. The init script no longer produces a false verification with this\nupdate.\n\n* vsftpd only supported usernames with a maximum length of 32 characters.\nThe updated package now supports usernames up to 128 characters long.\n\n* a system flaw meant vsftpd output could become dependent on the timing or\nsequence of other events, even when the \"lock_upload_files\" option was set.\nIf a file, filename.ext, was being uploaded and a second transfer of the\nfile, filename.ext, was started before the first transfer was finished, the\nresultant uploaded file was a corrupt concatenation of the latter upload\nand the tail of the earlier upload. With this updated package, vsftpd\nallows the earlier upload to complete before overwriting with the latter\nupload, fixing the issue.\n\n* the 'lock_upload_files' option was not documented in the manual page. A\nnew manual page describing this option is included in this package.\n\n* vsftpd did not support usernames that started with an underscore or a\nperiod character. These special characters are now allowed at the beginning\nof a username.\n\n* when storing a unique file, vsftpd could cause an error for some clients.\nThis is rectified in this package.\n\n* vsftpd init script was found to not be Linux Standards Base compliant.\nThis update corrects their exit codes to conform to the standard.\n\nAll vsftpd users are advised to upgrade to this updated package, which\nresolves these issues.", "reporter": "RedHat", "published": "2008-07-24T04:00:00", "type": "redhat", "title": "(RHSA-2008:0680) Moderate: vsftpd security and bug fix update", "enchantments": {"score": {"vector": "NONE", "value": 4.3}}, "bulletinFamily": "unix", "cvelist": ["CVE-2008-2375"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2017-09-08T12:16:40", "id": "RHSA-2008:0680", "href": "https://access.redhat.com/errata/RHSA-2008:0680", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2017-08-01T06:57:16", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "any", "packageVersion": "1.2.1-3E.16", "packageFilename": "vsftpd-1.2.1-3E.16.ppc.rpm", "packageName": "vsftpd", "arch": "ppc", "operator": "lt"}], "description": "vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP\nserver for Linux and Unix-like systems.\n\nThe version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in\ncombination with Pluggable Authentication Modules (PAM) had a memory leak\non an invalid authentication attempt. Since vsftpd prior to version 2.0.5\nallows any number of invalid attempts on the same connection this memory\nleak could lead to an eventual DoS. (CVE-2008-2375)\n\nThis update mitigates this security issue by including a backported patch\nwhich terminates a session after a given number of failed log in attempts.\nThe default number of attempts is 3 and this can be configured using the\n\"max_login_fails\" directive.\n\nAll vsftpd users should upgrade to this updated package, which addresses\nthis vulnerability.", "reporter": "RedHat", "published": "2008-07-24T04:00:00", "type": "redhat", "title": "(RHSA-2008:0579) Moderate: vsftpd security update", "enchantments": {"score": {"vector": "NONE", "value": 9.3}}, "bulletinFamily": "unix", "cvelist": ["CVE-2008-2375"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2017-07-28T18:43:26", "id": "RHSA-2008:0579", "href": "https://access.redhat.com/errata/RHSA-2008:0579", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}]}