Package proftpd updated to version 1.3.5-alt2.gita31d0ab for branch sisyphus in task 144569.

Published: 2013-01-24

BDU:2015-02003

Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить целостность защищаемой информации

Severity: LOW (1.2)

References:

Published: 2013-01-25
Modified: 2024-11-21

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.

Severity: LOW (1.2)

References:

Published: 2013-10-01
Modified: 2024-11-21

CVE-2013-4359

Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation.

Severity: MEDIUM (5.0)

References:

Version: 2.1.0

Package proftpd update in sisyphus on 2015-05-21

ALT-PU-2015-1457-1

Closed vulnerabilities

BDU:2015-02003

CVE-2012-6095

CVE-2013-4359