CVE-2011-4130

Related Files

Gentoo Linux Security Advisory 201309-15

Posted Sep 24, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201309-15 - Multiple vulnerabilities have been found in ProFTPD, the worst of which leading to remote execution of arbitrary code. Versions less than 1.3.4d are affected.

tags | advisory, remote, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2009-3555, CVE-2010-3867, CVE-2010-4221, CVE-2010-4652, CVE-2011-1137, CVE-2011-4130, CVE-2012-6095, CVE-2013-4359

SHA-256 | 791bb06b4102a706095adc46d590ae0b5ea0a225e56966180f59fa840c1de6d2

Download | Favorite | View

Slackware Security Advisory - proftpd Updates

Posted Feb 14, 2012

Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues.

tags | advisory

systems | linux, slackware

advisories | CVE-2011-4130

SHA-256 | cb63893e652e4b1ac3596a93b9ec8e823b155a7fe7c1cc34c0271f992a73ef6e

Download | Favorite | View

Mandriva Linux Security Advisory 2011-181

Posted Dec 8, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-181 - Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer. The updated packages have been upgraded to the latest version 1.3.3g which is not vulnerable to this issue.

tags | advisory, remote, arbitrary

systems | linux, mandriva

advisories | CVE-2011-4130

SHA-256 | 0be1d40f8f3b58111ad1f44517b3cd8c334da98ee590aaee94305394e4d7a9d6

Download | Favorite | View

Debian Security Advisory 2346-1

Posted Nov 16, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2346-1 - Several vulnerabilities were discovered in ProFTPD, an FTP server. ProFTPD incorrectly uses data from an unencrypted input buffer after encryption has been enabled with STARTTLS, an issue similar to CVE-2011-0411. ProFTPD uses a response pool after freeing it under exceptional conditions, possibly leading to remote code execution.

tags | advisory, remote, vulnerability, code execution

systems | linux, debian

advisories | CVE-2011-0411, CVE-2011-4130

SHA-256 | 4e0fcf4b058513cde8c483fad69e28ac40ae4aa41d60b8770ad1d405582c34f3

Download | Favorite | View