[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

DSA-416 fsp - buffer overflow, directory traversal

Bulletin has no description...

CVE-1999-1411

The vulnerability CVE-1999-1411 affects the fsp package 2.71-10 on Debian GNU/Linux 2.0. During installation, an anonymous FTP user is added without administrator notification, which could automatically enable anonymous FTP on servers such as wu-ftp. Impact described as enabling anonymous FTP acc...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

CVE-1999-0649

This CVE entry is rejected/not used per the description.

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...