Detections
Analytics

Mandrake Linux Security Advisory : proftpd (MDKSA-2003:095-1)

high Nessus Plugin ID 14077

Synopsis

The remote Mandrake Linux host is missing one or more security updates.

Description

A vulnerability was discovered by X-Force Research at ISS in ProFTPD's handling of ASCII translation. An attacker, by downloading a carefully crafted file, can remotely exploit this bug to create a root shell.

The ProFTPD team encourages all users to upgrade to version 1.2.7 or higher. The problematic code first appeared in ProFTPD 1.2.7rc1, and the provided packages are all patched by the ProFTPD team to protect against this vulnerability.

Update :

The previous update had a bug where the new packages would terminate with a SIGNAL 11 when the command 'NLST -alL' was performed in certain cases, such as if the size of the output of the command was greater than 1024 bytes.

These updated packages have a fix applied to prevent this crash.

Solution

Update the affected proftpd and / or proftpd-anonymous packages.

See Also

http://bugs.proftpd.org/show_bug.cgi?id=2194

http://xforce.iss.net/xforce/alerts/id/154

Plugin Details

Severity: High

ID: 14077

File Name: mandrake_MDKSA-2003-095.nasl

Version: 1.22

Type: local

Published: 7/31/2004

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:proftpd, p-cpe:/a:mandriva:linux:proftpd-anonymous, cpe:/o:mandrakesoft:mandrake_linux:9.1, cpe:/o:mandrakesoft:mandrake_linux:9.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 12/31/2003

Reference Information

CVE: CVE-2003-0831

CWE: 119

MDKSA: 2003:095-1