Package proftpd updated to version 1.3.5-alt2.gita31d0ab for branch sisyphus in task 144569.

Published: 2016-07-07
Modified: 2024-07-05

BDU:2015-02003

Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить целостность защищаемой информации

Severity: LOW (1.2) Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N

References:

Published: 2013-01-24
Modified: 2025-04-11

CVE-2012-6095

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.

Severity: LOW (1.2) Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N

References:

Published: 2013-09-30
Modified: 2025-04-11

CVE-2013-4359

Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation.

Severity: MEDIUM (5.0) Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

References:

Version: 2.1.2

Package proftpd update in sisyphus on 2015-05-21

ALT-PU-2015-1457-1

Closed vulnerabilities

BDU:2015-02003

CVE-2012-6095

CVE-2013-4359