ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution

ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemo...

ProFTPD 1.3.3c Backdoor Command Execution

This module exploits a malicious backdoor that was added to the ProFTPD download archive. This backdoor was present in the proftpd-1.3.3c.tar.bz2|gz archive between November 28th 2010 and 2nd December 2010. Module Options msf use exploit/unix/ftp/proftpd/133cbackdoor msf undefined133cbackdoor sho...

Fedora Update for proftpd FEDORA-2010-17091

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ProFTPd 1.3.2 rc3 < 1.3.3b (FreeBSD) - Telnet IAC Buffer Overflow (Metasploit)

$Id: proftptelnetiac.rb 11208 2010-12-02 21:10:03Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora Update for proftpd FEDORA-2010-17091

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2010-17091 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ProFTPD < 1.3.2rc3 DoS Vulnerability

ProFTPD is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd";...

ProFTPD < 1.3.3c Multiple Vulnerabilities

ProFTPD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; ifdescription...

proftpd -- Compromised source packages backdoor

The ProFTPD Project team reports: The security issue is caused due to the distribution of compromised ProFTPD 1.3.3c source code packages via the project's main FTP server and all of the mirror servers, which contain a backdoor allowing remote root access...

FreeBSD : proftpd -- remote code execution vulnerability (533d20e7-f71f-11df-9ae1-000bcdf0a03b)

Tippingpoint reports : This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ProFTPD. Authentication is not required to exploit this vulnerability. The flaw exists within the proftpd server component which listens by default on TCP port 21. When readi...

Fedora Update for proftpd FEDORA-2010-17098

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for proftpd MDVSA-2010:227 (proftpd)

Check for the Version of proftpd OpenVAS Vulnerability Test Mandriva Update for proftpd MDVSA-2010:227 proftpd Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for proftpd MDVSA-2010:227 (proftpd)

Check for the Version of proftpd OpenVAS Vulnerability Test Mandriva Update for proftpd MDVSA-2010:227 proftpd Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for proftpd FEDORA-2010-17220

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for proftpd FEDORA-2010-17220

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2010-17220 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for proftpd FEDORA-2010-17098

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2010-17098 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ZDI-10-229: ProFTPD TELNET_IAC Remote Code Execution Vulnerability

ZDI-10-229: ProFTPD TELNETIAC Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-229 November 2, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: ProFTPD -- Affected Products: ProFTPD FTP Server -- TippingPointTM IPS Customer Protection:...

ProFTPD security vulnerabilities

Buffer overflow on TELNETIAC ESC-sequence parsing. Directory traversal by creating symlinks with modsitemisc module...

[ MDVSA-2010:227 ] proftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:227 http://www.mandriva.com/security/ Package : proftpd Date : November 11, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities...

Fedora 12 : proftpd-1.3.3c-1.fc12 (2010-17220)

This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...

Mandriva Linux Security Advisory : proftpd (MDVSA-2010:227)

Multiple vulnerabilities were discovered and corrected in proftpd : Multiple directory traversal vulnerabilities in the modsitemisc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory...