1737 matches found
CVE-2013-4359
ProFTPD 1.3.4d and 1.3.5r3 are affected by an integer overflow in kbdint.c (mod_sftp) that can be triggered by a large response count in an authentication request, causing memory exhaustion and a DoS. The issue is confirmed across multiple advisories; remediation guidance in connected documents r...
CVE-2013-4359
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...
CVE-2013-4359
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...
Debian DSA-2767-1 : proftpd-dfsg - denial of service
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
CVE-2013-4359: Undefined Security Weakness
Integer overflow in kbdint.c in modsftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service memory consumption via a large response count value in an authentication request, which triggers a large memory allocation...
[SECURITY] [DSA 27671-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2767-1 [email protected] http://www.debian.org/security/ Nico Golde September 29, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2767-1 (proftpd-dfsg - denial of service)
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
DSA-2767-1 proftpd-dfsg - denial of service
Bulletin has no description...
Debian: Security Advisory (DSA-2767-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-201309-15 : ProFTPD: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201309-15 ProFTPD: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ProFTPD. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could possibly execute...
[SECURITY] Fedora 19 Update: proftpd-1.3.4d-4.fc19
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 20 Update: proftpd-1.3.4d-4.fc20
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 18 Update: proftpd-1.3.4d-4.fc18
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
Fedora 18 : proftpd-1.3.4d-4.fc18 (2013-16810)
This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora 20 : proftpd-1.3.4d-4.fc20 (2013-16790)
This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora Update for proftpd FEDORA-2013-16798
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for proftpd FEDORA-2013-16798
Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2013-16798 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for proftpd FEDORA-2013-16810
Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2013-16810 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 19 : proftpd-1.3.4d-4.fc19 (2013-16798)
This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
ProFTPD: Multiple vulnerabilities
Background ProFTPD is an advanced and very configurable FTP server. Description Multiple vulnerabilities have been discovered in ProFTPD. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker could possibly execute arbitrary code with the privileges o...