Fedora 14 : proftpd-1.3.3e-1.fc14 (2011-5040)

This update, to the current upstream maintenance release, fixes a large number of bugs see NEWS for details, and also a couple of security issues : - Plaintext command injection vulnerability in FTPS implementation i.e. modtls. See http://bugs.proftpd.org/showbug.cgi?id=3624 for details. -...

Fedora 13 : proftpd-1.3.3e-1.fc13 (2011-5033)

This update, to the current upstream maintenance release, fixes a large number of bugs see NEWS for details, and also a couple of security issues : - Plaintext command injection vulnerability in FTPS implementation i.e. modtls. See http://bugs.proftpd.org/showbug.cgi?id=3624 for details. -...

[SECURITY] Fedora 13 Update: proftpd-1.3.3e-1.fc13

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 14 Update: proftpd-1.3.3e-1.fc14

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 15 Update: proftpd-1.3.4-0.8.rc2.fc15

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : proftpd (SSA:2011-095-01)

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2011-095-01. The te...

[slackware-security] proftpd

New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/proftpd-1.3.3e-i486-1slack13.1.txz: Upgraded. Fixes CVE-2011-1137 badly formed SSH messages cause DoS...

Mandriva Linux Security Advisory : proftpd (MDVSA-2011:047)

A vulnerability was discovered and corrected in proftpd : Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message CVE-2011-1137. Additionally for Mandriva...

Debian DSA-2191-1 : proftpd-dfsg - several vulnerabilities

Several vulnerabilities have been discovered in ProFTPD, a versatile, virtual-hosting FTP daemon : - CVE-2008-7265 Incorrect handling of the ABOR command could lead to denial of service through elevated CPU consumption. - CVE-2010-3867 Several directory traversal vulnerabilities have been...

[SECURITY] [DSA 2191-1] proftpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2191-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2011 http://www.debian.org/security/faq -...

DSA-2191-1 proftpd-dfsg - several

Bulletin has no description...

DEBIAN-CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

Integer overflow

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

CVE-2011-1137 is an integer overflow in ProFTPD’s mod_sftp that affects 1.3.3d and earlier, triggered by a malformed SSH message and causing memory exhaustion/DoS. The issue is in the mod_sftp code path, with remote attackers able to induce high memory use potentially leading to OOM. Public detai...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

CVE-2011-1137

Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message...

ProFTPD integer overflow

Integer overflow in SFTP module...