CVE-2009-0542

概要

参考情報

• bugs.proftpd.org/show_bug.cgi
• secunia.com/advisories/34268
• security.gentoo.org/glsa/glsa-200903-27.xml
• debian.org/security/2009/dsa-1730
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2009/02/11/1
• openwall.com/lists/oss-security/2009/02/11/3
• openwall.com/lists/oss-security/2009/02/11/5
• securityfocus.com/archive/1/500823/100/0/threaded
• securityfocus.com/archive/1/500833/100/0/threaded
• securityfocus.com/archive/1/500851/100/0/threaded
• securityfocus.com/archive/1/500852/100/0/threaded
• exploit-db.com/exploits/8037

proftpd のその他の脆弱性

• CVE-2008-4242中 6.8ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request …
• CVE-2007-2165中 5.1The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module …
• CVE-2006-6563中 6.6Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local…
• CVE-2006-6171高 7.5ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which …
• CVE-2006-6170高 7.5Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ…