GLSA-201611-05 : tnftp: Arbitrary code execution
High Nessus Plugin ID 94889
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-201611-05 (tnftp: Arbitrary code execution)
The fetch_url function in usr.bin/ftp/fetch.c allows remote attackers to execute arbitrary commands via a Impact :
A remote attacker could possibly execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
SolutionAll tnftp users should upgrade to the latest version:
# emerge --sync # emerge --ask --verbose --oneshot '>=net-ftp/tnftp-20141104'