ProFTPD SQLShowInfo SQL Output Format String Vulnerability

Bugtraq ID:	14380
Class:	Input Validation Error
CVE:	CVE-2005-2390
Remote:	Yes
Local:	No
Published:	Jul 26 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to infamous42md.
Vulnerable:	Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Enterprise Linux 2.0 ProFTPD Project ProFTPD 1.3 .0rc1 ProFTPD Project ProFTPD 1.2.10 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 ProFTPD Project ProFTPD 1.2.9 rc3 ProFTPD Project ProFTPD 1.2.9 rc2 ProFTPD Project ProFTPD 1.2.9 rc1 ProFTPD Project ProFTPD 1.2.9 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG 1.3 + OpenPKG OpenPKG Current + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.8 rc2 ProFTPD Project ProFTPD 1.2.8 rc1 ProFTPD Project ProFTPD 1.2.8 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.7 + Sun Cobalt Qube 3 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 rc1 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 rc3 ProFTPD Project ProFTPD 1.2.2 rc1 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre11 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 ProFTPD Project ProFTPD 1.2 .0rc3 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 ProFTPD Project ProFTPD 1.2 .0rc2 ProFTPD Project ProFTPD 1.2 .0rc1 ProFTPD Project ProFTPD 1.2 + Cobalt Qube 3.0 + Cobalt Qube 2.0 + Cobalt RaQ 3.0 + Cobalt RaQ 2.0 + Cobalt RaQ 1.1 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG Current Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux
Not Vulnerable:	ProFTPD Project ProFTPD 1.3 .0rc2

ProFTPD SQLShowInfo SQL Output Format String Vulnerability

A format-string vulnerability affects ProFTPD. This issue occurs when the SQLShowInfo directive is enabled. If the attacker can influence data in the backend SQL database, then the attacker may be able to exploit this issue by inserting a malicious format string into data that will be queried by ProFTPD.

A successful attack will allow arbitrary code to execute in the context of the server.

ProFTPD SQLShowInfo SQL Output Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

ProFTPD SQLShowInfo SQL Output Format String Vulnerability

Solution:

Please see the referenced advisories for more information.


ProFTPD Project ProFTPD 1.2 .0rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre4

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre5

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre8

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre11

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre6

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre9

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre7

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre10

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.1

• Mandriva proftpd-1.2.10-2.1.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-2.1.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-9.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-9.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-2.1.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-2.1.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-9.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-9.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Server 7
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/proftpd-1.2.8-7.i586.rpm


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Workstation 7
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.10

• Trustix proftpd-1.2.10-9tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix proftpd-1.2.10-9tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/

ProFTPD Project ProFTPD 1.2.2 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.4

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Workstation 8
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.5

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Server 8
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd ates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.5 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.6

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9

• Mandriva proftpd-1.2.9-3.3.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.100mdk.i586.rpm
  Mandrakelinux 10.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.100mdk.i586.rpm
  Mandrakelinux 10.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.9-9.i586.rpm
  Server 10
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/proftpd-1.2.9-9.i586.rpm

ProFTPD Project ProFTPD 1.2.9 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.3 .0rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

OpenPKG OpenPKG 2.3

• OpenPKG proftpd-1.2.10-2.3.2.src.rpm
  OpenPKG 2.3
  ftp://ftp.openpkg.org/release/2.3/UPD/proftpd-1.2.10-2.3.2.src.rpm

OpenPKG OpenPKG 2.4

• OpenPKG proftpd-1.3.0rc1-2.4.1.src.rpm
  OpenPKG 2.4
  ftp://ftp.openpkg.org/release/2.4/UPD/proftpd-1.3.0rc1-2.4.1.src.rpm

ProFTPD SQLShowInfo SQL Output Format String Vulnerability

References:

• 1.3.0 Release Notes (ProFTPD)
  
• ProFTPD Home Page (ProFTPD)