Mandriva Linux Security Advisory : proftpd (MDVSA-2011:047)
Medium Nessus Plugin ID 52729
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionA vulnerability was discovered and corrected in proftpd :
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message (CVE-2011-1137).
Additionally for Mandriva Linux 2010.0 proftpd was upgraded to the same version as in Mandriva Linux 2010.2.
The updated packages have been patched to correct this issue.
SolutionUpdate the affected packages.