ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.

ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote host is affected by the vulnerability described in GLSA-202003-35 (ProFTPd: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ProFTPd. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by interrupting the data transfer channel, could       possibly execute arbitrary code with the privileges of the process or       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for proftpd fixes the following issues :

proftpd was updated to version 1.3.6c.

Security issues fixed :

  - CVE-2020-9272: Fixed an out-of-bounds read in mod_cap     (bsc#1164572).

  - CVE-2020-9273: Fixed a potential memory corruption     caused by an interruption of the data transfer channel     (bsc#1164574).

ID	Name	Product	Family	Severity
501105	Siemens SIMATIC CP Out-of-Bounds Read (CVE-2020-9272)	Tenable OT Security	Tenable.ot	high
134641	GLSA-202003-35 : ProFTPd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
134196	openSUSE Security Update : proftpd (openSUSE-2020-273)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-9272

high

Tenable Plugins

high

high

high