Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo GLSA-200502-26 Normal: GProFTPD gprostats Code Risk

gentoo
Calendar Grey February 18, 2005
Scroller Gentoo
A vulnerability in gprostats presents a format string issue that potentially enables the execution of arbitrary code. Users of GProFTPD are strongly urged to update their software promptly.
gprostats, distributed with GProFTPD, is vulnerable to a format string vulnerability, potentially leading to the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200502-26 https://security.gentoo.org/ Severity: Normal Title: GProFTPD: gprostats format string vulnerability Date: February 18, 2005 Bugs: #81894 ID: 200502-26

Synopsis ======= gprostats, distributed with GProFTPD, is vulnerable to a format string vulnerability, potentially leading to the execution of arbitrary code.
Background ========= GProFTPD is a GTK+ administration tool for the ProFTPD server. GProFTPD is distributed with gprostats, a utility to parse ProFTPD transfer logs.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-ftp/gproftpd < 8.1.9 >= 8.1.9
========== Tavis Ormandy of the Gentoo Linux Secur...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution format string normal severity gproftpd gprostats

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution format string normal severity gproftpd gprostats

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround