Lucene search

K
gentooGentoo FoundationGLSA-201110-07
HistoryOct 10, 2011 - 12:00 a.m.

vsftpd: Denial of service

2011-10-1000:00:00
Gentoo Foundation
security.gentoo.org
13

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.29 Low

EPSS

Percentile

96.8%

Background

vsftpd is a very secure FTP daemon written with speed, size and security in mind.

Description

A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details.

Impact

A remote authenticated attacker could cause a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All vsftpd users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-ftp/vsftpd-2.3.4"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-ftp/vsftpd<Β 2.3.4UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.29 Low

EPSS

Percentile

96.8%