| Package | Affected versions | Patched versions |
|---|---|---|
| proftpd | = 1.2= 1.2.0_rc3= 1.2.1= 1.2.2= 1.2.2_rc1= 1.2.2_rc2= 1.2_pre1= 1.2_pre10= 1.2_pre11= 1.2_pre2= 1.2_pre3= 1.2_pre4= 1.2_pre5= 1.2_pre6= 1.2_pre7= 1.2_pre8= 1.2_pre9 |
ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free