LWN.net Logo

proftpd: denial of service

Package(s):proftpd CVE #(s):CVE-2006-5815
Created:November 17, 2006 Updated:January 24, 2007
Description: A denial of service (DoS) vulnerability exists in the FTP server ProFTPD, up to and including version 1.3.0. The flaw is due to both a potential bus error and a definitive buffer overflow in the code which determines the FTP command buffer size limit. The vulnerability can be exploited only if the "CommandBufferSize" directive is explicitly used in the server configuration.
Alerts:
Mandriva MDKSA-2006:217-2 2007-01-23
Trustix TSLSA-2006-0070 2006-12-08
Slackware SSA:2006-335-02 2006-12-04
Debian DSA-1222-2 2006-12-01
Gentoo 200611-26 2006-11-30
Mandriva MDKSA-2006:217-1 2006-11-30
Debian DSA-1222-1 2006-11-30
Trustix TSLSA-2006-0066 2006-11-28
Debian DSA-1218-1 2006-11-21
Mandriva MDKSA-2006:217 2006-11-20
OpenPKG OpenPKG-SA-2006.035 2006-11-17

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds