ProFTPD: format string vulnerabilities [LWN.net]

Package(s):

proftpd

CVE #(s):

CAN-2005-2390

Created:

August 1, 2005

Updated:

September 6, 2005

Description:

Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via certain inputs to the shutdown message from ftpshut, or the SQLShowInfo mod_sql directive.

Alerts:

OpenPKG	OpenPKG-SA-2005.020	2005-09-06
Debian	DSA-795-2	2005-09-02
Debian	DSA-795-1	2005-09-01
Mandriva	MDKSA-2005:140	2005-08-15
Trustix	TSLSA-2005-0040	2005-08-05
Gentoo	200508-02	2005-08-01

(Log in to post comments)