ProFTPD 'mod_sql' Username SQL Injection Vulnerability

Bugtraq ID:	33722
Class:	Input Validation Error
CVE:	CVE-2009-0542
Remote:	Yes
Local:	No
Published:	Feb 10 2009 12:00AM
Updated:	May 07 2015 05:07PM
Credit:	[email protected]
Vulnerable:	ProFTPD Project ProFTPD 1.3.2 rc2 ProFTPD Project ProFTPD 1.3.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	ProFTPD Project ProFTPD 1.3.2 rc3 ProFTPD Project ProFTPD 1.3.2

ProFTPD 'mod_sql' Username SQL Injection Vulnerability

ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to manipulate SQL queries, modify data, or exploit latent vulnerabilities in the underlying database. This may result in unauthorized access and a compromise of the application; other attacks are also possible.

ProFTPD 1.3.1 through 1.3.2 rc 2 are vulnerable.

ProFTPD 'mod_sql' Username SQL Injection Vulnerability

Attackers can use standard tools to exploit this issue.

The following example input is available:

username: %') and 1=2 union select 1,1,uid,gid,homedir,shell from users; --
password: 1

username: %') and 1=2 union (select <name>,1,<uid>,<gid>,0x2F,0x2F62696E2F62617368); -- a

The following exploit is available:

• /data/vulnerabilities/exploits/33722.pl

ProFTPD 'mod_sql' Username SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva proftpd-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian proftpd-basic_1.3.1-17lenny2_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_arm.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_arm.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_arm.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_arm.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Mandriva Linux Mandrake 2008.1

• Mandriva proftpd-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-64

• Debian proftpd-basic_1.3.1-17lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_ia64.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_ia64.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_ia64.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian proftpd-basic_1.3.1-17lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_powerpc.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_powerpc.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_powerpc.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_powerpc.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 m68k

• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian proftpd-basic_1.3.1-17lenny1_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_i386.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_i386.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_i386.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_i386.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva proftpd-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva proftpd-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian proftpd-basic_1.3.1-17lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_mipsel.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_mipsel.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_mipsel.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian proftpd-basic_1.3.1-17lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_amd64.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_amd64.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_amd64.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_amd64.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 ia-32

• Debian proftpd-basic_1.3.1-17lenny2_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_i386.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_i386.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_i386.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_i386.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 hppa

• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 sparc

• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 s/390

• Debian proftpd-basic_1.3.1-17lenny2_s390.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_s390.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_s390.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_s390.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_s390.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_s390.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_s390.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_s390.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Mandriva Linux Mandrake 2009.0

• Mandriva proftpd-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_vroot-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

• Debian proftpd-basic_1.3.1-17lenny1_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_arm.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_arm.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_arm.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian proftpd-basic_1.3.1-17lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_alpha.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_alpha.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_alpha.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_alpha.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 armel

• Debian proftpd-basic_1.3.1-17lenny2_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_armel.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_armel.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_armel.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_armel.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

MandrakeSoft Corporate Server 4.0

• Mandriva proftpd-1.3.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-anonymous-1.3.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0

• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva proftpd-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-devel-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ban-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ctrls_admin-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_gss-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ifsession-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_load-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_file-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_radius-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_sql-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_radius-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ratio-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_shaper-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_site_misc-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_mysql-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql_postgres-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_time-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_tls-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_vroot-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 amd64

• Debian proftpd-basic_1.3.1-17lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_amd64.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_amd64.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_amd64.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_amd64.deb

Debian Linux 4.0 mipsel

• Debian proftpd-basic_1.3.1-17lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_mipsel.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_mipsel.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_mipsel.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_mipsel.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 5.0 mips

• Debian proftpd-basic_1.3.1-17lenny1_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_mips.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_mips.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_mips.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian proftpd-basic_1.3.1-17lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny1_powerpc.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny1_powerpc.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny1_powerpc.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian proftpd-basic_1.3.1-17lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_ia64.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_ia64.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_ia64.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_ia64.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

Debian Linux 4.0 mips

• Debian proftpd-basic_1.3.1-17lenny2_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny2_mips.deb


• Debian proftpd-doc_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny2_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny2_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny2_mips.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny2_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny2_mips.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny2_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny2_mips.deb


• Debian proftpd_1.3.1-17lenny2_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny2_all.deb

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva proftpd-1.3.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-anonymous-1.3.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva proftpd-1.3.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-anonymous-1.3.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva proftpd-1.3.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-anonymous-1.3.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

ProFTPD 'mod_sql' Username SQL Injection Vulnerability

References:

• mod_sql improperly substitutes variables in user/group names (TJ Saunders)
  
• net-ftp/proftpd <1.3.2 Encoding-dependent SQL injection vulnerability (Alessandro Calorì)
  
• ProFTPD Homepage (ProFTPD)
  
• proftpd: SQL injection during login (Vincent Danen)
  
• Re: CVE request for proftpd (TJ Saunders)
  
• Re: CVE request for proftpd (TJ Saunders)
  
• SQL injection vulnerability (Shino)
  
• Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) ([email protected])
  
• ProFTPd with mod_mysql Authentication Bypass Exploit ([email protected])
  
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Shino )
  
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Sergio Aguayo )
  
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Daniel Mayer )
  
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Edward_Bjarte_Fjellsk )
  
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Benjamin Milde )
  
• Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as w ([email protected])