Package name
proftpd
Date
2003-09-26
Advisory ID
MDKSA-2003:095
Affected versions
9.2 i586 , 9.1 i586 , 9.1 i586

Problem description

A vulnerability was discovered by X-Force Research at ISS in ProFTPD's handling of ASCII translation. An attacker, by downloading a carefully crafted file, can remotely exploit this bug to create a root shell. The ProFTPD team encourages all users to upgrade to version 1.2.7 or higher. The problematic code first appeared in ProFTPD 1.2.7rc1, and the provided packages are all patched by the ProFTPD team to protect against this vulnerability.

Updated packages

9.2 i586

 1d9b21bcb2a18fa43158c0c0aa25d13d  9.2/RPMS/proftpd-1.2.8-5.1.92mdk.i586.rpm
80c5b73c6e33444e2dd91659c2b897bd  9.2/RPMS/proftpd-anonymous-1.2.8-5.1.92mdk.i586.rpm
ea89351b37a5572fac3f45b27a80b0f3  9.2/SRPMS/proftpd-1.2.8-5.1.92mdk.src.rpm

9.1 i586

 280ff4f9b4bcf64f4ad5dac03e166113  ppc/9.1/RPMS/proftpd-1.2.8-1.1.91mdk.ppc.rpm
ab5f599256e4587e22258821a7854221  ppc/9.1/RPMS/proftpd-anonymous-1.2.8-1.1.91mdk.ppc.rpm
cc47eb3dd724eb5a7570e4571b173d6b  ppc/9.1/SRPMS/proftpd-1.2.8-1.1.91mdk.src.rpm

9.1 i586

 7ad667bd30ee6a26daa8bb4db6d5d8eb  9.1/RPMS/proftpd-1.2.8-1.1.91mdk.i586.rpm
df578f06c818a862ed641124747f90ff  9.1/RPMS/proftpd-anonymous-1.2.8-1.1.91mdk.i586.rpm
cc47eb3dd724eb5a7570e4571b173d6b  9.1/SRPMS/proftpd-1.2.8-1.1.91mdk.src.rpm

References