what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Mandriva Linux Security Advisory 2010-227

Posted Nov 12, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-227 - Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a SITE MKDIR, SITE UTIME command. Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a FTPS server.

tags | advisory, remote, overflow, arbitrary, vulnerability

systems | linux, mandriva

advisories | CVE-2010-3867, CVE-2010-4221

SHA-256 | a6a929924a2a4e416021de37391ae322365e7a942efcedc03f1b0a657de2be0c

Download | Favorite | View