ProFTPD MOD_TLS Remote Buffer Overflow Vulnerability

Bugtraq ID:	21326
Class:	Boundary Condition Error
CVE:	CVE-2006-6170
Remote:	Yes
Local:	No
Published:	Nov 10 2006 12:00AM
Updated:	Jan 25 2007 04:33PM
Credit:	Evgeny Legerov discovered this issue.
Vulnerable:	Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 11.0 ProFTPD Project ProFTPD 1.3 rc3 ProFTPD Project ProFTPD 1.3 a ProFTPD Project ProFTPD 1.3 .0rc2 ProFTPD Project ProFTPD 1.3 .0rc1 ProFTPD Project ProFTPD 1.3 ProFTPD Project ProFTPD 1.2.10 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 ProFTPD Project ProFTPD 1.2.9 rc3 ProFTPD Project ProFTPD 1.2.9 rc2 ProFTPD Project ProFTPD 1.2.9 rc1 ProFTPD Project ProFTPD 1.2.9 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG 1.3 + OpenPKG OpenPKG Current + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.8 rc2 ProFTPD Project ProFTPD 1.2.8 rc1 ProFTPD Project ProFTPD 1.2.8 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.7 + Sun Cobalt Qube 3 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 rc1 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 rc3 ProFTPD Project ProFTPD 1.2.2 rc1 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre11 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 ProFTPD Project ProFTPD 1.2 .0rc3 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 ProFTPD Project ProFTPD 1.2 .0rc2 ProFTPD Project ProFTPD 1.2 .0rc1 ProFTPD Project ProFTPD 1.2 + Cobalt Qube 3.0 + Cobalt Qube 2.0 + Cobalt RaQ 3.0 + Cobalt RaQ 2.0 + Cobalt RaQ 1.1 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha
Not Vulnerable:

ProFTPD MOD_TLS Remote Buffer Overflow Vulnerability

ProFTPD is prone to a remote buffer-overflow vulnerability.

Exploiting this issue allows remote attackers to cause a buffer overflow, to corrupt memory, and to execute arbitrary machine code in the context of the server application, facilitating the compromise of affected computers.

ProFTPD 1.3.0a and prior versions are vulnerable to this issue.

ProFTPD MOD_TLS Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

ProFTPD MOD_TLS Remote Buffer Overflow Vulnerability

Solution:
Please see the reference section for vendor fixes and updates.


Slackware Linux 11.0

• Slackware proftpd-1.3.0a-i486-1_slack11.0.tgz
  Slackware 11.0:
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ proftpd-1.3.0a-i486-1_slack11.0.tgz

ProFTPD Project ProFTPD 1.2 .0rc3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre9

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 .0rc2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre7

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre10

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre5

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre4

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 .0rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre8

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre11

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre6

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2 pre2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.10

• Debian proftpd-common_1.2.10-15sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_alpha.deb


• Debian proftpd-common_1.2.10-15sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_amd64.deb


• Debian proftpd-common_1.2.10-15sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_arm.deb


• Debian proftpd-common_1.2.10-15sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_hppa.deb


• Debian proftpd-common_1.2.10-15sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_i386.deb


• Debian proftpd-common_1.2.10-15sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_ia64.deb


• Debian proftpd-common_1.2.10-15sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_m68k.deb


• Debian proftpd-common_1.2.10-15sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_mips.deb


• Debian proftpd-common_1.2.10-15sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_mipsel.deb


• Debian proftpd-common_1.2.10-15sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_powerpc.deb


• Debian proftpd-common_1.2.10-15sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_s390.deb


• Debian proftpd-common_1.2.10-15sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-common_ 1.2.10-15sarge3_sparc.deb


• Debian proftpd-doc_1.2.10-15sarge3_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-doc_1.2 .10-15sarge3_all.deb


• Debian proftpd-ldap_1.2.10-15sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_alpha.deb


• Debian proftpd-ldap_1.2.10-15sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_amd64.deb


• Debian proftpd-ldap_1.2.10-15sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_arm.deb


• Debian proftpd-ldap_1.2.10-15sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_hppa.deb


• Debian proftpd-ldap_1.2.10-15sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_i386.deb


• Debian proftpd-ldap_1.2.10-15sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_ia64.deb


• Debian proftpd-ldap_1.2.10-15sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_m68k.deb


• Debian proftpd-ldap_1.2.10-15sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_mips.deb


• Debian proftpd-ldap_1.2.10-15sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_mipsel.deb


• Debian proftpd-ldap_1.2.10-15sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_powerpc.deb


• Debian proftpd-ldap_1.2.10-15sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_s390.deb


• Debian proftpd-ldap_1.2.10-15sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-ldap_1. 2.10-15sarge3_sparc.deb


• Debian proftpd-mysql_1.2.10-15sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_alpha.deb


• Debian proftpd-mysql_1.2.10-15sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_amd64.deb


• Debian proftpd-mysql_1.2.10-15sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_arm.deb


• Debian proftpd-mysql_1.2.10-15sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_hppa.deb


• Debian proftpd-mysql_1.2.10-15sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_i386.deb


• Debian proftpd-mysql_1.2.10-15sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_ia64.deb


• Debian proftpd-mysql_1.2.10-15sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_m68k.deb


• Debian proftpd-mysql_1.2.10-15sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_mips.deb


• Debian proftpd-mysql_1.2.10-15sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_mipsel.deb


• Debian proftpd-mysql_1.2.10-15sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_powerpc.deb


• Debian proftpd-mysql_1.2.10-15sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_s390.deb


• Debian proftpd-mysql_1.2.10-15sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-mysql_1 .2.10-15sarge3_sparc.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_alpha.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_amd64.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_arm.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_hppa.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_i386.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_ia64.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_m68k.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_mips.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_mipsel.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_powerpc.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_s390.deb


• Debian proftpd-pgsql_1.2.10-15sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd-pgsql_1 .2.10-15sarge3_sparc.deb


• Debian proftpd_1.2.10-15sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_alpha.deb


• Debian proftpd_1.2.10-15sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_amd64.deb


• Debian proftpd_1.2.10-15sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_arm.deb


• Debian proftpd_1.2.10-15sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_hppa.deb


• Debian proftpd_1.2.10-15sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_i386.deb


• Debian proftpd_1.2.10-15sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_ia64.deb


• Debian proftpd_1.2.10-15sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_m68k.deb


• Debian proftpd_1.2.10-15sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_mips.deb


• Debian proftpd_1.2.10-15sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_mipsel.deb


• Debian proftpd_1.2.10-15sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_powerpc.deb


• Debian proftpd_1.2.10-15sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_s390.deb


• Debian proftpd_1.2.10-15sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/proftpd/proftpd_1.2.10- 15sarge3_sparc.deb


• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.2 rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.2 rc3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.4

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.5 rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.5

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.6

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.7 rc2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.7 rc3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.7 rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.7

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.8

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.8 rc2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.8 rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.9 rc3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.9 rc2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.9

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.2.9 rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.3 .0rc1

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.3 rc3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.3 .0rc2

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

ProFTPD Project ProFTPD 1.3

• ProFTPD Project proftpd-1.3.0a.tar.bz2
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.0a.tar.bz2

Slackware Linux 10.0

• Slackware proftpd-1.3.0a-i486-1_slack10.0.tgz
  Slackware 10.0:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ proftpd-1.3.0a-i486-1_slack10.0.tgz

Slackware Linux 10.1

• Slackware proftpd-1.3.0a-i486-1_slack10.1.tgz
  Slackware 10.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ proftpd-1.3.0a-i486-1_slack10.1.tgz

Slackware Linux 10.2

• Slackware proftpd-1.3.0a-i486-1_slack10.2.tgz
  Slackware 10.2:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ proftpd-1.3.0a-i486-1_slack10.2.tgz

Slackware Linux 8.1

• Slackware proftpd-1.3.0a-i386-1_slack8.1.tgz
  Slackware 8.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/p roftpd-1.3.0a-i386-1_slack8.1.tgz

Slackware Linux 9.0

• Slackware proftpd-1.3.0a-i386-1_slack9.0.tgz
  Slackware 9.0:
  ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/p roftpd-1.3.0a-i386-1_slack9.0.tgz

Slackware Linux 9.1

• Slackware proftpd-1.3.0a-i486-1_slack9.1.tgz
  Slackware 9.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/p roftpd-1.3.0a-i486-1_slack9.1.tgz

ProFTPD MOD_TLS Remote Buffer Overflow Vulnerability

References:

• ProFTPD Home Page (ProFTPD)
  
• ProFTPD mod_tls pre-authentication buffer overflow ([email protected])