ProFTPD mod_tls Module NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	36804
Class:	Design Error
CVE:	CVE-2009-3639
Remote:	Yes
Local:	No
Published:	Oct 23 2009 12:00AM
Updated:	Dec 28 2009 07:52AM
Credit:	TJ Saunders
Vulnerable:	Red Hat Fedora 12 Red Hat Fedora 11 Red Hat Fedora 10 ProFTPD Project ProFTPD 1.3.2 rc3 ProFTPD Project ProFTPD 1.3.2 rc2 ProFTPD Project ProFTPD 1.3.2 ProFTPD Project ProFTPD 1.3.1 ProFTPD Project ProFTPD 1.3 rc3 ProFTPD Project ProFTPD 1.3 a ProFTPD Project ProFTPD 1.3 .0rc2 ProFTPD Project ProFTPD 1.3 .0rc1 ProFTPD Project ProFTPD 1.3 ProFTPD Project ProFTPD 1.2.10 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 ProFTPD Project ProFTPD 1.2.9 rc3 ProFTPD Project ProFTPD 1.2.9 rc2 ProFTPD Project ProFTPD 1.2.9 rc1 ProFTPD Project ProFTPD 1.2.9 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG 1.3 + OpenPKG OpenPKG Current + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.8 rc2 ProFTPD Project ProFTPD 1.2.8 rc1 ProFTPD Project ProFTPD 1.2.8 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.7 + Sun Cobalt Qube 3 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 rc1 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 rc3 ProFTPD Project ProFTPD 1.2.2 rc1 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre11 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 ProFTPD Project ProFTPD 1.2 .0rc3 + Conectiva Linux 7.0 + Conectiva Linux 6.0 + Conectiva Linux 5.1 + Conectiva Linux 5.0 + Conectiva Linux graficas + Conectiva Linux ecommerce + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 ProFTPD Project ProFTPD 1.2 .0rc2 ProFTPD Project ProFTPD 1.2 .0rc1 ProFTPD Project ProFTPD 1.2 + Cobalt Qube 3.0 + Cobalt Qube 2.0 + Cobalt RaQ 3.0 + Cobalt RaQ 2.0 + Cobalt RaQ 1.1 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	ProFTPD Project ProFTPD 1.3.3 rc2 ProFTPD Project ProFTPD 1.3.2b

ProFTPD mod_tls Module NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

ProFTPD is prone to a security-bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.

Successful exploits allow attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Versions prior to ProFTPD 1.3.2b are vulnerable.

ProFTPD mod_tls Module NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Attackers use man-in-the-middle attacks to exploit this issue.

ProFTPD mod_tls Module NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.


Debian Linux 5.0 ia-64

• Debian proftpd-basic_1.3.1-17lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_ia64.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_ia64.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_ia64.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_ia64.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 alpha

• Debian proftpd-basic_1.3.1-17lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_alpha.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_alpha.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_alpha.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_alpha.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 mipsel

• Debian proftpd-basic_1.3.1-17lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_mipsel.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_mipsel.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_mipsel.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_mipsel.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 armel

• Debian proftpd-basic_1.3.1-17lenny4_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_armel.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_armel.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_armel.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_armel.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_armel.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0

• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva proftpd-1.3.2-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_autohost-1.3.2-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_case-1.3.2-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian proftpd-basic_1.3.1-17lenny4_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_mips.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_mips.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_mips.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_mips.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_mips.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Mandriva Linux Mandrake 2009.1

• Mandriva proftpd-mod_quotatab_file-1.3.2-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_vroot-1.3.2-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_file-1.3.2-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 sparc

• Debian proftpd-basic_1.3.1-17lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_sparc.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_sparc.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_sparc.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_sparc.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva proftpd-mod_ctrls_admin-1.3.2-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_ldap-1.3.2-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_quotatab_ldap-1.3.2-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_wrap_sql-1.3.2-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva proftpd-mod_quotatab_file-1.3.2-0.2mdvmes5.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-32

• Debian proftpd-basic_1.3.1-17lenny4_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_i386.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_i386.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_i386.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_i386.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_i386.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva proftpd-mod_autohost-1.3.2-0.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_sql-1.3.2-0.2mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 hppa

• Debian proftpd-basic_1.3.1-17lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_hppa.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_hppa.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_hppa.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_hppa.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 m68k

• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 arm

• Debian proftpd-basic_1.3.1-17lenny4_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-ba sic_1.3.1-17lenny4_arm.deb


• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd-mod-ldap_1.3.1-17lenny4_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-ldap_1.3.1-17lenny4_arm.deb


• Debian proftpd-mod-mysql_1.3.1-17lenny4_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-mysql_1.3.1-17lenny4_arm.deb


• Debian proftpd-mod-pgsql_1.3.1-17lenny4_arm.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-mo d-pgsql_1.3.1-17lenny4_arm.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Mandriva Linux Mandrake 2009.0

• Mandriva proftpd-mod_quotatab_file-1.3.2-0.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva proftpd-mod_rewrite-1.3.2-0.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 amd64

• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

Debian Linux 5.0 powerpc

• Debian proftpd-doc_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd-do c_1.3.1-17lenny4_all.deb


• Debian proftpd_1.3.1-17lenny4_all.deb
  http://security.debian.org/pool/updates/main/p/proftpd-dfsg/proftpd_1. 3.1-17lenny4_all.deb

ProFTPD Project ProFTPD 1.2 .0rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre9

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre7

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre10

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre5

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre4

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 .0rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre8

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre11

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre6

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2 pre2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.10

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2 rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.2 rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.4

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.5 rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.5

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.6

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7 rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.7

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.8 rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.2.9 rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3 .0rc1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3 rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3 .0rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3 a

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3.1

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3.2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3.2 rc2

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

ProFTPD Project ProFTPD 1.3.2 rc3

• ProFTPD Project proftpd-1.3.3rc2.tar.gz
  ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.3rc2.tar.gz

MandrakeSoft Corporate Server 3.0

• Mandriva proftpd-anonymous-1.3.2-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva proftpd-1.3.2-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

ProFTPD mod_tls Module NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

References:

• Bug 3275 Improper SSL/TLS certificate subjectAltName verification (TJ Saunders)
  
• ProFTPD Homepage (ProFTPD)