ProFTPD Prior To 1.3.3g Use-After-Free Remote Code Execution Vulnerability

Bugtraq ID:	50631
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-4130
Remote:	Yes
Local:	No
Published:	Nov 10 2011 12:00AM
Updated:	Apr 13 2015 10:24PM
Credit:	Anonymous via ZDI,Anonymous via ZDI
Vulnerable:	Slackware Linux x86_64 -current Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current ProFTPD Project ProFTPD 1.3.3 rc2 ProFTPD Project ProFTPD 1.3.3 ProFTPD Project ProFTPD 1.3.2 rc3 ProFTPD Project ProFTPD 1.3.2 rc2 ProFTPD Project ProFTPD 1.3.2 ProFTPD Project ProFTPD 1.3.1 ProFTPD Project ProFTPD 1.3 rc3 ProFTPD Project ProFTPD 1.3 a ProFTPD Project ProFTPD 1.3 .0rc2 ProFTPD Project ProFTPD 1.3 .0rc1 ProFTPD Project ProFTPD 1.3 ProFTPD Project ProFTPD 1.2.10 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 ProFTPD Project ProFTPD 1.2.9 rc3 ProFTPD Project ProFTPD 1.2.9 rc2 ProFTPD Project ProFTPD 1.2.9 rc1 ProFTPD Project ProFTPD 1.2.9 + Mandriva Linux Mandrake 10.0 + OpenPKG OpenPKG 2.0 + OpenPKG OpenPKG 1.3 + OpenPKG OpenPKG Current + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.8 rc2 ProFTPD Project ProFTPD 1.2.8 rc1 ProFTPD Project ProFTPD 1.2.8 + Slackware Linux 9.0 + Slackware Linux 8.1 + Slackware Linux -current ProFTPD Project ProFTPD 1.2.7 rc3 ProFTPD Project ProFTPD 1.2.7 rc2 ProFTPD Project ProFTPD 1.2.7 rc1 ProFTPD Project ProFTPD 1.2.7 + Sun Cobalt Qube 3 ProFTPD Project ProFTPD 1.2.6 ProFTPD Project ProFTPD 1.2.5 rc1 ProFTPD Project ProFTPD 1.2.5 ProFTPD Project ProFTPD 1.2.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ProFTPD Project ProFTPD 1.2.3 ProFTPD Project ProFTPD 1.2.2 rc3 ProFTPD Project ProFTPD 1.2.2 rc1 ProFTPD Project ProFTPD 1.2.2 ProFTPD Project ProFTPD 1.2.1 ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre11 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 ProFTPD Project ProFTPD 1.2 .0rc3 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 ProFTPD Project ProFTPD 1.2 .0rc2 ProFTPD Project ProFTPD 1.2 .0rc1 ProFTPD Project ProFTPD 1.2 + Cobalt Qube 3.0 + Cobalt Qube 2.0 + Cobalt RaQ 3.0 + Cobalt RaQ 2.0 + Cobalt RaQ 1.1 ProFTPD Project ProFTPD 1.3.3c ProFTPD Project ProFTPD 1.3.2c ProFTPD Project ProFTPD 1.3.2b ProFTPD Project ProFTPD 1.3.2a Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	ProFTPD Project ProFTPD 1.3.4 ProFTPD Project ProFTPD 1.3.3g

ProFTPD Prior To 1.3.3g Use-After-Free Remote Code Execution Vulnerability

ProFTPD is prone to a remote code-execution vulnerability.

Successful exploits will allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.

ProFTPD prior to 1.3.3g are vulnerable.

ProFTPD Prior To 1.3.3g Use-After-Free Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ProFTPD Prior To 1.3.3g Use-After-Free Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Slackware Linux 12.0

• Slackware proftpd-1.3.4a-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ proftpd-1.3.4a-i486-1_slack12.0.tgz

Slackware Linux -current

• Slackware proftpd-1.3.4a-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/pr oftpd-1.3.4a-i486-1.txz

Slackware Linux 12.2

• Slackware proftpd-1.3.4a-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ proftpd-1.3.4a-i486-1_slack12.2.tgz

Slackware Linux 13.1 x86_64

• Slackware proftpd-1.3.4a-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/proftpd-1.3.4a-x86_64-1_slack13.1.txz

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva proftpd-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.1

• Slackware proftpd-1.3.4a-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ proftpd-1.3.4a-i486-1_slack13.1.txz

Slackware Linux 12.1

• Slackware proftpd-1.3.4a-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ proftpd-1.3.4a-i486-1_slack12.1.tgz

Slackware Linux x86_64 -current

• Slackware proftpd-1.3.4a-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ n/proftpd-1.3.4a-x86_64-1.txz

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva proftpd-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5

• Mandriva proftpd-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.0 x86_64

• Slackware proftpd-1.3.4a-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/proftpd-1.3.4a-x86_64-1_slack13.0.txz

Mandriva Linux Mandrake 2010.1

• Mandriva proftpd-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.37 x86_64

• Slackware proftpd-1.3.4a-x86_64-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packag es/proftpd-1.3.4a-x86_64-1_slack13.37.txz

Slackware Linux 13.0

• Slackware proftpd-1.3.4a-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ proftpd-1.3.4a-i486-1_slack13.0.txz

Mandriva Linux Mandrake 2011 x86_64

• Mandriva proftpd-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva proftpd-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-devel-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_autohost-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ban-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_case-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ctrls_admin-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_gss-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ifsession-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ldap-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_load-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_file-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_ldap-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_radius-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_quotatab_sql-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_radius-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_ratio-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_rewrite-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_pam-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sftp_sql-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_shaper-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_site_misc-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_mysql-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_passwd-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_postgres-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_sql_sqlite-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_time-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_tls_shmcache-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_vroot-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_file-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva proftpd-mod_wrap_sql-1.3.3g-0.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 11.0

• Slackware proftpd-1.3.4a-i486-1_slack11.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ proftpd-1.3.4a-i486-1_slack11.0.tgz

Slackware Linux 13.37

• Slackware proftpd-1.3.4a-i486-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages /proftpd-1.3.4a-i486-1_slack13.37.txz

ProFTPD Prior To 1.3.3g Use-After-Free Remote Code Execution Vulnerability

References:

• Bug 3711 - Response pool use-after-free memory corruption error (ProFTP)
  
• Parallel Plesk Homepage (Parallels)
  
• ProFTPD Homepage (ProFTPD)
  
• ProFTPD Response Pool Use-After-Free Remote Code Execution Vulnerability (TippingPoint Zero Day Initiative)