Debian Proftpd-Dfsg vulnerabilities

CVE-2021-46854 [HIGH] CVE-2021-46854: proftpd-dfsg - mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers b... mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters. Scope: local bookworm: resolved (fixed in 1.3.7c+dfsg-1) bullseye: resolved (fixed in 1.3.7a+dfsg-12+deb11u1) forky: resolved (fixed in 1.3.7c+dfsg-1) sid: resolved (fixed in 1.3.7c+dfsg-1) trixie: resolved (fixed in 1.3.7c+dfsg-1)

CVE-2020-9272 [HIGH] CVE-2020-9272: proftpd-dfsg - ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the c... ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function. Scope: local bookworm: resolved (fixed in 1.3.6c-1) bullseye: resolved (fixed in 1.3.6c-1) forky: resolved (fixed in 1.3.6c-1) sid: resolved (fixed in 1.3.6c-1) trixie: resolved (fixed in 1.3.6c-1)

CVE-2006-6171 [CRITICAL] CVE-2006-6171: proftpd-dfsg - ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when Comm... ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with CVE-2006-5815, but this was an error stemming from a vague initial disclosure. NOTE: ProFTPD de

CVE-2019-19271 [HIGH] CVE-2019-19271: proftpd-dfsg - An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong itera... An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server. Scope: local bookworm: r

CVE-2019-19270 [HIGH] CVE-2019-19270: proftpd-dfsg - An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to ... An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server

CVE-2009-3639 [MEDIUM] CVE-2009-3639: proftpd-dfsg - The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the... The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by

CVE-2019-19272 [HIGH] CVE-2019-19272: proftpd-dfsg - An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct derefe... An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup. Scope: local bookworm: resolved (fixed in 1.3.6-1) bullseye: resolved (fixed in 1.3.6-1)

CVE-2005-4816 [HIGH] CVE-2005-4816: proftpd-dfsg - Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers... Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password. Scope: local bookworm: resolved (fixed in 1.2.10+1.3.0rc5-1) bullseye: resolved (fixed in 1.2.10+1.3.0rc5-1) forky: resolved (fixed in 1.2.10+1.3.0rc5-1) sid: resolved (fixed in 1.2.10+1.3.0

CVE-2008-4242 [MEDIUM] CVE-2008-4242: proftpd-dfsg - ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, ... ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. Scope: local bookworm: resolved (fixed in 1.3.1-15) bul

CVE-2017-7418 [MEDIUM] CVE-2017-7418: proftpd-dfsg - ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home direct... ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other

CVE-2013-4359 [MEDIUM] CVE-2013-4359: proftpd-dfsg - Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows re... Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation. Scope: local bookworm: resolved (fixed in 1.3.5~rc3-2.1) bullseye: resolved (fixed in 1.3.5~rc3-2.1) forky: resol

CVE-2019-19269 [MEDIUM] CVE-2019-19269: proftpd-dfsg - An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereferen... An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/

CVE-2009-3736 [MEDIUM] CVE-2009-3736: bochs - ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham ... ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2008-7265 [MEDIUM] CVE-2008-7265: proftpd-dfsg - The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated... The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer. Scope: local bookworm: resolved (fixed in 1.3.2-1) bullseye: resolved (fixed in 1.3.2-1) forky: resolved (fixed in 1.3.2-1) sid: resolved (fixed in 1.3.2-1) trixie: resolved (fixed in 1

CVE-2012-6095 [LOW] CVE-2012-6095: proftpd-dfsg - ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users ... ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands. Scope: local bookworm: resolved (fixed in 1.3.4a-3) bullseye: resolved (fixed in 1.3.4a-3) forky: resolved (fixed in 1.3.4a-3) sid: resolved (fixed in 1.3.4a-3) tri