Gentoo Security Advisory GLSA 200701-09 (oftpd)

The remote host is missing updates announced in advisory GLSA 200701-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200701-09 : oftpd: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200701-09 oftpd: Denial of Service By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact : Remote, unauthenticated attackers may be ab...

CVE-2006-6767

The provided connected advisories confirm CVE-2006-6767 affects the oftpd FTP daemon, with denial of service via LPRT or LPASV commands when an unsupported address family is supplied. Affected versions are prior to 0.3.7; exploitation triggers an assertion failure that aborts the daemon, enabling...