Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 16.04: USN-4515-1 Moderate: Pure-FTPd Information Exposure

ubuntu
Calendar Grey September 17, 2020
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-4516-1 addresses a vulnerability in OpenSSH that may compromise user credentials. It is advisable to apply the update.
Pure-FTPd could be made to expose sensitive information if it recieved specially crafted input.

Summary

Pure-FTPd could be made to expose sensitive information if it recieved

specially crafted input.

Software Description:

- pure-ftpd: Secure and efficient FTP server

Details:

Antonio Norales discovered that Pure-FTPd incorrectly handled directory

aliases. An attacker could possibly use this issue to access sensitive

information. (CVE-2020-9274)

Topics%20covered

Topics Covered

security advisory security issue buffer overflow information exposure ubuntu pure-ftpd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  pure-ftpd                       1.0.36-3.2+deb8u1build0.16.04.1
  pure-ftpd-common                1.0.36-3.2+deb8u1build0.16.04.1
  pure-ftpd-ldap                  1.0.36-3.2+deb8u1build0.16.04.1
  pure-ftpd-mysql                 1.0.36-3.2+deb8u1build0.16.04.1
  pure-ftpd-postgresql            1.0.36-3.2+deb8u1build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4515-1

CVE-2020-9274

September 17, 2020

Topics%20covered

Topics Covered

security advisory security issue buffer overflow information exposure ubuntu pure-ftpd

Package Information

https://launchpad.net/ubuntu/+source/pure-ftpd/1.0.36-3.2+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here