| Package | Affected versions | Patched versions |
|---|---|---|
| ftpd | = 5.51= 5.60 | |
| wu-ftpd | = 2.4.2_beta1= 2.4.2_beta18= 2.4.2_beta18_vr10= 2.4.2_beta18_vr11= 2.4.2_beta18_vr12= 2.4.2_beta18_vr13= 2.4.2_beta18_vr14= 2.4.2_beta18_vr15= 2.4.2_beta18_vr4= 2.4.2_beta18_vr5= 2.4.2_beta18_vr6= 2.4.2_beta18_vr7= 2.4.2_beta18_vr8= 2.4.2_beta18_vr9= 2.4.2_vr16= 2.4.2_vr17= 2.5= 2.6 |
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free