proftpd -- Compromised source packages backdoor

2010-11-28T00:00:00
ID ED7FA1B4-FF59-11DF-9759-080027284EAA
Type freebsd
Reporter FreeBSD
Modified 2010-11-28T00:00:00

Description

The ProFTPD Project team reports:

The security issue is caused due to the distribution of compromised ProFTPD 1.3.3c source code packages via the project's main FTP server and all of the mirror servers, which contain a backdoor allowing remote root access.