The H has an article
about a back door that was recently put into the ProFTPD server code.
"The back door provides the attackers with complete access to systems on which the modified version of the server has been installed. On installation, the modified version informs the group behind the back door by contacting an IP address in the Saudi Arabia area. Entering the command 'HELP ACIDBITCHEZ' results in the modified server displaying a root shell.
Ironically, to place their back door, the attackers used a zero day vulnerability in ProFTPD itself, which the developers were using to make the source code available to users.
" (Thanks to Jan-Frode Myklebust who gave us a heads-up about this issue).
to post comments)