[ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability

Gentoo Linux Security Advisory GLSA 200502-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-0484

The CVE-2005-0484 issue is a format-string vulnerability in the gprostats component of GProFTPD, where a crafted filename during an FTP transfer can insert format specifiers into the ProFTPD transfer log and potentially allow remote code execution. Affected systems are GProFTPD with gprostats pri...

GProFTPD: gprostats format string vulnerability

Background GProFTPD is a GTK+ administration tool for the ProFTPD server. GProFTPD is distributed with gprostats, a utility to parse ProFTPD transfer logs. Description Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a format string vulnerability in the gprostats utility. Impa...