ProFTPD Shutdown Message Format String Vulnerability

Bugtraq ID:	14381
Class:	Input Validation Error
CVE:	CVE-2005-2390
Remote:	Yes
Local:	No
Published:	Jul 26 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to infamous42md.
Vulnerable:	Turbolinux Turbolinux Workstation 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Enterprise Linux 2.0 ProFTPD Project ProFTPD 1.3 .0rc1 ProFTPD Project ProFTPD 1.2.10 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 ProFTPD Project ProFTPD 1.2.9 rc3 ProFTPD Project ProFTPD 1.2.9 rc2 ProFTPD Project ProFTPD 1.2.9 rc1 ProFTPD Project ProFTPD 1.2.9 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG 1.3 + OpenPKG OpenPKG Current + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.8 rc2 ProFTPD Project ProFTPD 1.2.8 rc1 ProFTPD Project ProFTPD 1.2.8 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.7 + Sun Cobalt Qube 3 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 rc1 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 rc3 ProFTPD Project ProFTPD 1.2.2 rc1 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre11 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 ProFTPD Project ProFTPD 1.2 .0rc3 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 ProFTPD Project ProFTPD 1.2 .0rc2 ProFTPD Project ProFTPD 1.2 .0rc1 ProFTPD Project ProFTPD 1.2 + Cobalt Qube 3.0 + Cobalt Qube 2.0 + Cobalt RaQ 3.0 + Cobalt RaQ 2.0 + Cobalt RaQ 1.1 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG Current Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux
Not Vulnerable:	ProFTPD Project ProFTPD 1.3 .0rc2

ProFTPD Shutdown Message Format String Vulnerability

A format-string vulnerability affects ProFTPD. This issue occurs when the server prints a shutdown message containing certain variables such as the current directory. If an attacker could create a directory on the server, this may trigger this issue.

Successful exploitation will result in arbitrary code execution in the context of the server.

ProFTPD Shutdown Message Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

ProFTPD Shutdown Message Format String Vulnerability

Solution:

This issue has been addressed in ProFTPD 1.3.0rc2.

Please see the referenced advisories for more information.


ProFTPD Project ProFTPD 1.2 .0rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre9

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre7

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre10

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre5

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre4

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre8

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre11

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre6

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.1

• Mandriva proftpd-1.2.10-2.1.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-2.1.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-9.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.10-9.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-2.1.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-2.1.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-9.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.10-9.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Server 7
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/proftpd-1.2.8-7.i586.rpm


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Workstation 7
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.10

• Trustix proftpd-1.2.10-9tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix proftpd-1.2.10-9tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/

ProFTPD Project ProFTPD 1.2.2 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.4

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Workstation 8
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.5 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.5

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Server 7
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/proftpd-1.2.8-7.i586.rpm


• Turbolinux proftpd-1.2.8-7.i586.rpm
  Server 8
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd ates/RPMS/proftpd-1.2.8-7.i586.rpm

ProFTPD Project ProFTPD 1.2.6

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc3

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc2

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9

• Mandriva proftpd-1.2.9-3.3.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.100mdk.i586.rpm
  Mandrakelinux 10.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-1.2.9-3.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.100mdk.i586.rpm
  Mandrakelinux 10.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva proftpd-anonymous-1.2.9-3.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz


• Turbolinux proftpd-1.2.9-9.i586.rpm
  Server 10
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/proftpd-1.2.9-9.i586.rpm

ProFTPD Project ProFTPD 1.2.9 rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

ProFTPD Project ProFTPD 1.3 .0rc1

• ProFTPD proftpd-1.3.0rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0rc2.tar.gz

OpenPKG OpenPKG 2.3

• proftpd-1.2.10-2.3.2.src.rpm
  OpenPKG 2.3
  ftp://ftp.openpkg.org/release/2.3/UPD/proftpd-1.2.10-2.3.2.src.rpm


• OpenPKG proftpd-1.2.10-2.3.2.src.rpm
  OpenPKG 2.3
  ftp://ftp.openpkg.org/release/2.3/UPD/proftpd-1.2.10-2.3.2.src.rpm

OpenPKG OpenPKG 2.4

• OpenPKG proftpd-1.3.0rc1-2.4.1.src.rpm
  OpenPKG 2.4
  ftp://ftp.openpkg.org/release/2.4/UPD/proftpd-1.3.0rc1-2.4.1.src.rpm

ProFTPD Shutdown Message Format String Vulnerability

References:

• 1.3.0 Release Notes (ProFTPD)
  
• ProFTPD Home Page (ProFTPD)