|
|
| |
|
| |
proftpd-dfsg: SQL injection vulnerability
| Package(s): | proftpd-dfsg |
CVE #(s): | CVE-2009-0542
CVE-2009-0543
|
| Created: | February 26, 2009 |
Updated: | September 24, 2009 |
| Description: |
proftpd-dfsg has two SQL injection vulnerabilities.
From the Debian alert:
CVE-2009-0542
Shino discovered that proftpd is prone to an SQL injection
vulnerability via the use of certain characters in the username.
CVE-2009-0543
TJ Saunders discovered that proftpd is prone to an SQL injection
vulnerability due to insufficient escaping mechanisms, when
multybite character encodings are used. |
| Alerts: |
|
( Log in to post comments)
|
|
|