Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4242HistorySep 25, 2008 - 7:25 p.m.
CVE-2008-4242
2008-09-2519:25:18
Debian Security Bug Tracker
security-tracker.debian.org
13
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.4%
ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | proftpd-dfsg | < 1.3.1-15 | proftpd-dfsg_1.3.1-15_all.deb |
| Debian | 11 | all | proftpd-dfsg | < 1.3.1-15 | proftpd-dfsg_1.3.1-15_all.deb |
| Debian | 10 | all | proftpd-dfsg | < 1.3.1-15 | proftpd-dfsg_1.3.1-15_all.deb |
| Debian | 999 | all | proftpd-dfsg | < 1.3.1-15 | proftpd-dfsg_1.3.1-15_all.deb |
| Debian | 13 | all | proftpd-dfsg | < 1.3.1-15 | proftpd-dfsg_1.3.1-15_all.deb |
Related
openvas
openvas
Fedora Core 10 FEDORA-2009-0089 (proftpd)
2009-01-07 00:00:00
Fedora Core 9 FEDORA-2009-0064 (proftpd)
2009-01-07 00:00:00
Fedora Core 9 FEDORA-2009-0064 (proftpd)
2009-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: proftpd-1.3.1-8.fc8
2009-01-07 09:31:15
[SECURITY] Fedora 10 Update: proftpd-1.3.1-8.fc10
2009-01-07 09:16:07
[SECURITY] Fedora 9 Update: proftpd-1.3.1-8.fc9
2009-01-07 09:12:48
ubuntucve
ubuntucve
CVE-2008-4242
2008-09-25 00:00:00
nessus
nessus
Debian DSA-1689-1 : proftpd-dfsg - missing input validation
2008-12-22 00:00:00
Fedora 10 : proftpd-1.3.1-8.fc10 (2009-0089)
2009-04-23 00:00:00
Fedora 9 : proftpd-1.3.1-8.fc9 (2009-0064)
2009-01-16 00:00:00
cve
cve
CVE-2008-4242
2008-09-25 19:25:18
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2008-10-23 10:57:36
[Backports-security-announce] Security Update for proftpd-dfsg
2008-10-23 10:57:54
cvelist
cvelist
CVE-2008-4242
2008-09-25 19:00:00
nvd
nvd
CVE-2008-4242
2008-09-25 19:25:18
prion
prion
Cross site request forgery (csrf)
2008-09-25 19:25:00
freebsd
freebsd
proftpd -- Long Command Processing Vulnerability
2008-09-22 00:00:00
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.4%
Related for DEBIANCVE:CVE-2008-4242