security advisorycriticalcode execution
Przemyslaw Frasunek discovered a vulnerability in tnftpd or lukemftpd respectively, the enhanced ftp daemon from NetBSD. An attacker could utilise this to execute arbitrary code on the server.. -------------------------------------------------------------------------- Debian Security Advisory DSA 551-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze September 21st, 2004 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : lukemftpd Vulnerability : incorrect internal variable handling Problem-Type : remote Debian-specific: no CVE ID : CAN-2004-0794 Przemyslaw Frasunek discovered a vulnerability in tnftpd or lukemftpd respectively, the enhanced ftp daemon from NetBSD. An attacker could utilise this to execute arbitrary code on the server. For the stable distribution (woody) this problem has been fixed in version 1.1-1woody2. For the unstable distribution (sid) this problem has been fixed in version 1.1-2.2. We recommend that you upgrade your lukemftpd package. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 607 06103d9e3c0203ac9683b6d85b0648e8 Size/MD5 checksum: 21428 31c9f38076478a9efca1fb6af1e4da91 Size/MD5 checksum: 162161 66286f1cc17988964c6e224e196c7b94 Alpha architecture: Size/MD5 checksum: 87198 8a02a98d0a2896249462e30aa990c823 ARMarchitecture: Size/MD5 checksum: 75226 b61e81a3e2ec0a523bd2022766b63597 Intel IA-32 architecture: Size/MD5 checksum: 70458 a2c736d42b10f7c711f8275b0ab4aa81 Intel IA-64 architecture: Size/MD5 checksum: 103980 eab48b110d0d2890f0c0e69bbe774a13 HP Precision architecture: Size/MD5 checksum: 81882 12578b2f1d100a2feda3183548c257ac Motorola 680x0 architecture: Size/MD5 checksum: 67132 219fb21073fd97ed01e9726258a9817f Big endian MIPS architecture: Size/MD5 checksum: 79572 6b0f8dcb732f6fde37ca532ac085ad67 Little endian MIPS architecture: Size/MD5 checksum: 79464 714e022877fa3c8349956f89a84b721f PowerPC architecture: Size/MD5 checksum: 75426 0556b5925eb57b3d40cbff7352e3fc0d IBM S/390 architecture: Size/MD5 checksum: 75448 7d43eff77fb5a4ac0c71b50864438465 Sun Sparc architecture: Size/MD5 checksum: 77976 67ec7f91ad6e30ac60f1e54b51cb476b These files will probably be moved into the stable distribution on its next update. --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and . The Ubuntu Security Notice highlights a proftpd issue that may lead to unauthorized access and offers guidance on how to secure the system through necessary updates.. Debian Security,lukemftpd,Remote Execution,Upgrade Instructions. . Severity: Critical. LinuxSecurity.com Team
Sep 21, 2004
•Critical
Debian
Refine advisories
