FreeBSD : proftpd -- vulnerability in mod_tls (a733b5ca-06eb-11e6-817f-3085a9a4510d)
Medium Nessus Plugin ID 90607
SynopsisThe remote FreeBSD host is missing one or more security-related updates.
DescriptionMITRE reports :
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
SolutionUpdate the affected packages.