[SECURITY] [DSA 1218-1] New proftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1218-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 21st, 2006 http://www.debian.org/security/faq -...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.3

Nov. 14, 2006 Konstantin Lepikhov 1.3.0rel-alt1.3 - fix null reference in CVE-2006-5815 patch made by upstream...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.2

Nov. 13, 2006 Konstantin Lepikhov 1.3.0rel-alt1.2 - Security fix for CVE-2006-5815 "CommandBufferSize" Directive Remote Code Execution Vulnerability...

CVE-2006-5815

ProFTPD 1.3.0 and earlier is affected by a stack-based buffer overflow in the sreplace function, enabling remote exploitation (likely by authenticated users) to cause denial of service and potentially execute arbitrary code. Public evidence includes exploit modules (Metasploit) for ProFTPD 1.2–1....