Gentoo Linux Security Advisory GLSA 200405-09
https://security.gentoo.org/
Severity: High
Title: ProFTPD Access Control List bypass vulnerability
Date: May 19, 2004
Bugs: #49496
ID: 200405-09
Synopsis
=======
Version 1.2.9 of ProFTPD introduced a vulnerability that causes
CIDR-based Access Control Lists (ACLs) to be treated as "AllowAll",
thereby allowing remote users full access to files available to the
FTP daemon.
Background
=========
ProFTPD is an FTP daemon.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-ftp/proftpd == 1.2.9-r1 >= 1.2.9-r2
1 net-ftp/proftpd == 1.2.9 >= 1.2.9-r2
==========
ProFTPD 1.2.9 introduced a vu...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.