Gentoo Linux: GLSA-200903-27 Normal: ProFTPD SQL Injection Threat

Gentoo Linux Security Advisory GLSA 200903-27 https://security.gentoo.org/ Severity: Normal Title: ProFTPD: Multiple vulnerabilities Date: March 12, 2009 Bugs: #258450 ID: 200903-27

Synopsis ======= Two vulnerabilities in ProFTPD might allow for SQL injection attacks.
Background ========= ProFTPD is an advanced and very configurable FTP server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-ftp/proftpd < 1.3.2 >= 1.3.2
========== The following vulnerabilities were reported:
* Percent characters in the username are not properly handled, which introduces a single quote character during variable substitution by mod_sql (CVE-2009-0542).
* Some inv...