9 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
84.4%
Several vulnerabilities were discovered in ProFTPD, an FTP server:
ProFTPD incorrectly uses data from an unencrypted input buffer
after encryption has been enabled with STARTTLS, an issue
similar to
CVE-2011-0411.
For the oldstable distribution (lenny), this problem has been fixed in
version 1.3.1-17lenny9.
For the stable distribution (squeeze), this problem has been fixed in
version 1.3.3a-6squeeze4.
For the testing distribution (wheezy) and the unstable distribution
(sid), this problem has been fixed in version 1.3.4~rc3-2.
We recommend that you upgrade your proftpd-dfsg packages.