| Package | Affected versions | Patched versions |
|---|---|---|
| bftpd | = 1.6= 1.7= 1.7.2= 1.8= 2.0.2= 2.0.3= 2.1= 2.1.1= 2.1.2= 2.2= 2.2.1≤ 2.3 |
The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.bu_host structure member, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free