Linux Distros Unpatched Vulnerability : CVE-2020-9273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, an...

Proftpd Project Remote Code Execution (CVE-2020-9273)

A Remote Code Execution vulnerability exists in the Proftpd Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Exploit for Use After Free in Proftpd

CVE-2020-9273 These are the files I created during analysis a...

QNAP QTS Multiple ProFTPD Vulnerabilities

QNAP QTS is prone to multiple vulnerabilities in ProFTPD and other components. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Updated proftpd packages fix security vulnerability

Updated proftpd packages fix security vulnerability: Antonio Morales discovered an use-after-free flaw in the memory pool allocator in ProFTPD. Interrupting current data transfers can corrupt the ProFTPD memory pool, leading to denial of service, or potentially the execution of arbitrary code...

openSUSE: Security Advisory for proftpd (openSUSE-SU-2020:0273-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0273-1 Security update for proftpd

This update for proftpd fixes the following issues: proftpd was updated to version 1.3.6c. Security issues fixed: - CVE-2020-9272: Fixed an out-of-bounds read in modcap bsc1164572. - CVE-2020-9273: Fixed a potential memory corruption caused by an interruption of the data transfer channel bsc11645...

Security update for proftpd (moderate)

openSUSE Security Update: Security update for proftpd Announcement ID: openSUSE-SU-2020:0273-1 Rating: moderate References: 1164572 1164574 Cross-References: CVE-2020-9272 CVE-2020-9273 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that...

Fedora 30 : proftpd (2020-76c707cff0)

This update, to the current upstream stable release version, is a cumulative bug-fix release including a security fix for a use-after-free vulnerability CVE-2020-9273: successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. Not...

Fedora 31 : proftpd (2020-876b1f664e)

This update, to the current upstream stable release version, is a cumulative bug-fix release including a security fix for a use-after-free vulnerability CVE-2020-9273: successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. Not...

[SECURITY] [DSA 4635-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 26, 2020 https://www.debian.org/security/faq -...

Debian: Security Advisory (DLA-2115-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2115-1] proftpd-dfsg security update

Package : proftpd-dfsg Version : 1.3.5e+r1.3.5-2+deb8u6 CVE ID : CVE-2020-9273 It was discovered that there was a a use-after-free vulnerability in in the proftpd-dfsg FTP server. Exploitation of this vulnerability within the memory pool handling could have allowed a remote attacker to execute...

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

CVE-2020-9273

CVSS context: CVE-2020-9273 affects ProFTPD, where interrupting a data transfer can corrupt the memory pool, triggering a use-after-free in alloc_pool and potentially enabling remote code execution. What’s affected: ProFTPD (notably around 1.3.7-era releases per advisory) with a memory allocator ...