Oracle Linux 3 : vsftpd (ELSA-2008-0579)

From Red Hat Security Advisory 2008:0579 : An updated vsftpd package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for...

Scientific Linux Security Update : vsftpd on SL3.x i386/x86_64

The version of vsftpd as shipped in Scientific Linux 3 when used in combination with Pluggable Authentication Modules PAM had a memory leak on an invalid authentication attempt. Since vsftpd prior to version 2.0.5 allows any number of invalid attempts on the same connection this memory leak could...

SLES10: Security update for vsftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vsftpd More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES9: Security update for vsftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vsftpd For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5034480 within the SuSE...

SuSE9 Security Update : vsftpd (YOU Patch Number 12192)

This update of vsftpd fixes a memory leak that can occur during authentication. CVE-2008-2375 Additionally non-security bugs for SLES10 were fixed. There were some issues with simultaneous FTP PUT of the same file name that lead to a corrupted file on the server. %NASLMINLEVEL 70300 C Tenable...

CentOS 3 : vsftpd (CESA-2008:0579)

An updated vsftpd package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of...

RHEL 4 : vsftpd (RHSA-2008:0680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0680 advisory. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of vsftpd as shipped in Red...

CVE-2008-2375

CVE-2008-2375 is a memory-leak vulnerability in vsftpd exposed on Red Hat Enterprise Linux 3/4 when PAM is used. The issue occurs after an invalid authentication attempt within a single session, enabling potential denial of service via memory exhaustion. Public references indicate Red Hat/RHSA-20...