Oracle Solaris Third-Party Patch Update : proftpd (cve_2011_4130_use_after)

high Nessus Plugin ID 80742

Language:

Synopsis

The remote Solaris system is missing a security patch for third-party software.

Description

The remote Solaris system is missing necessary patches to address security updates :

- Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer. (CVE-2011-4130)

Solution

Upgrade to Solaris 11/11 SRU 03.

Plugin Details

Severity: High

ID: 80742

File Name: solaris11_proftpd_20120119.nasl

Version: 1.3

Type: local

Family: Solaris Local Security Checks

Published: 1/19/2015

Updated: 1/14/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:oracle:solaris:11.0, p-cpe:/a:oracle:solaris:proftpd

Required KB Items: Host/local_checks_enabled, Host/Solaris11/release, Host/Solaris11/pkg-list

Patch Publication Date: 1/19/2012

Reference Information

CVE: CVE-2011-4130

Detections

Analytics