4 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-3125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The modtls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than...
UBUNTU-CVE-2016-3125
The modtls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman DH key to be used and consequently allow attackers to have unspecified impact via unknown vectors...
PT-2016-1626
Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.5b ProFTPD versions prior to 1.3.6rc2 Description The issue exists due to improper handling of the TLSDHParamFile directive in the mod tls module. This could lead to the use of a weaker than intended Diffie-Hellma...
DEBIAN-CVE-2009-3639
The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended...