ProFTPD响应池释放后重用代码执行漏洞

CVE ID: CVE-2011-4130 ProFTPD是免费的Unix和Linux FTP服务器。 ProFTPD在管理响应池的方式上存在代码执行漏洞，远程已验证攻击者可利用此漏洞在远程主机上执行任意代码。 ProFTPD 1.3.3g / 1.3.4 厂商补丁： ProFTPD Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.proftpd.org/...

ProFTPD < 1.3.3g / 1.3.4 Response Pool Use-After-Free Code Execution

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is earlier than 1.3.3g or 1.3.4. As such, it is potentially affected by a code execution vulnerability due to how the server manages the response po...

ProFTPD < 1.3.3g / 1.3.4 Response Pool Use-After-Free Code Execution

Binary data 6101.prm...

ProFTPD Response Pool Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the ProFTPd server. Authentication is required to exploit this vulnerability in order to have access to the ftp command set. The specific flaw exists within how the server manages the response pool...