Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
91

Gentoo: GLSA-200701-09 Normal: oftpd Denial Of Service Threat

An assertion in oftpd could lead to a denial of service vulnerability.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200701-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: oftpd: Denial of Service Date: January 15, 2007 Bugs: #159178 ID: 200701-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An assertion in oftpd could lead to a denial of service vulnerability. Background ========= oftpd is a small, anonymous only ftp daemon. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-ftp/oftpd < 0.3.7-r3 > = 0.3.7-r3 Description ========== By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact ===== Remote, unauthenticated attackers may be able to terminate any oftpd process, denying service to legitimate users. Workaround ========= There is no known workaround at this time. Resolution ========= All oftpd users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-ftp/oftpd-0.3.7-r3" References ========= [ 1 ] CVE-2006-6767 https://www.cve.org/CVERecord?id=CVE-2006-6767 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200701-09 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is ofutmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . This notification addresses a vulnerability in oftpd impacting Gentoo users; upgrading is advised to avert potential exploitation.. Denial of Service, Gentoo Security, oftpd Bug. . LinuxSecurity.com Team

Calendar 2 Jan 15, 2007 Gentoo
87

Debian: DSA 485-2 Important: oftpd Denial Of Service Vulnerability

A remote attacker could cause the oftpd process to crash by specifying a large value in a PORT command.. Debian Security Advisory DSA 473-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman April 3rd, 2004 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : oftpd Problem-Type : denial of service Debian-specific: no CVE Ids : CAN-2004-0376 Debian bug : 216871 A vulnerability was discovered in oftpd, an anonymous FTP server, whereby a remote attacker could cause the oftpd process to crash by specifying a large value in a PORT command. For the stable distribution (woody) this problem has been fixed in version 0.3.6-6. For the unstable distribution (sid) these problems have been fixed in version 20040304-1. We recommend that you update your oftpd package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 582 ec0796ba52c95ba4ee83414917b656c4 Size/MD5 checksum: 49463 329930f2d835f6c754b6c79a496f038a Size/MD5 checksum: 77201 78b4139bb0108297b9814564db986852 Alpha architecture: Size/MD5 checksum: 46166 cea2315f6960525ac9c113510f20dfbc ARM architecture: Size/MD5 checksum: 40084 28fb6ba5082855444980ca611e8429c0 Intel IA-32 architecture: Size/MD5 checksum: 38442 32cacf8eb9d37a8406302811ac3d62ac Intel IA-64architecture: Size/MD5 checksum: 53688 3142a68ecc08c448e082d339812796c8 HP Precision architecture: Size/MD5 checksum: 42828 eef0881c474cce76cdf012ac797b8203 Big endian MIPS architecture: Size/MD5 checksum: 39898 316629cf18ed8906ea09b84140ecf64c Little endian MIPS architecture: Size/MD5 checksum: 39976 1e6fc0b5f9c402d15541f8d5bd6a36a9 PowerPC architecture: Size/MD5 checksum: 39434 a712ef00a8bc169f4bfd319583367f59 IBM S/390 architecture: Size/MD5 checksum: 38824 eb1405f335b5344b43b7617ee9b1ecfd Sun Sparc architecture: Size/MD5 checksum: 42250 15668b00038e349cbf6b0331d791532d These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . The Ubuntu Security Notice USN-3581-1 addresses a critical openssl flaw discovered on March 15, 2021.. oftpd Denial of Service, Debian Security Advisory, remote attack fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Apr 05, 2004 Important Debian
91

Gentoo: GLSA-200403-08 Moderate: oftpd Denial of Service

A remotely-exploitable overflow exists in oftpd, allowing an attacker to crash the oftpd daemon.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200403-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: oftpd DoS vulnerability Date: March 29, 2004 Bugs: #45738 ID: 200403-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A remotely-exploitable overflow exists in oftpd, allowing an attacker to crash the oftpd daemon. Background ========= Quote from "oftpd is designed to be as secure as an anonymous FTP server can possibly be. It runs as non-root for most of the time, and uses the Unix chroot() command to hide most of the systems directories from external users - they cannot change into them even if the server is totally compromised! It contains its own directory change code, so that it can run efficiently as a threaded server, and its own directory listing code (most FTP servers execute the system "ls" command to list files)." Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- net-ftp/oftpd = 0.3.7 Description ========== Issuing a port command with a number higher than 255 causes the server to crash. The port command may be issued before any authentication takes place, meaning the attacker does not need to know a valid username and password in order to exploit this vulnerability. Impact ===== This exploit causes a denial of service. Workaround ========= While a workaround is not currently known for this issue, all users are advised to upgrade to thelatest version of the affected package. Resolution ========= All users should upgrade to the current version of the affected package: # emerge sync # emerge -pv "> =net-ftp/oftpd-0.3.7" # emerge "> =net-ftp/oftpd-0.3.7" References ========= [ 1 ] Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. . A remote denial-of-service vulnerability exists in Gentoo's oftpd service. To mitigate potential threats, please upgrade immediately. For further information, consult GLSA 200403-08.. oftpd security,gentoo advisory,remote crash,denial of service,daemon security. . LinuxSecurity.com Team

Calendar 2 Mar 29, 2004 Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here