ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
BID:6781
Info
ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
| Bugtraq ID: | 6781 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 05 2003 12:00AM |
| Updated: | Feb 05 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to Przemyslaw Frasunek. |
| Vulnerable: |
ProFTPD Project ProFTPD 1.2 pre9 ProFTPD Project ProFTPD 1.2 pre8 ProFTPD Project ProFTPD 1.2 pre7 ProFTPD Project ProFTPD 1.2 pre6 ProFTPD Project ProFTPD 1.2 pre5 ProFTPD Project ProFTPD 1.2 pre4 ProFTPD Project ProFTPD 1.2 pre3 ProFTPD Project ProFTPD 1.2 pre2 ProFTPD Project ProFTPD 1.2 pre10 ProFTPD Project ProFTPD 1.2 pre1 |
| Not Vulnerable: |
ProFTPD Project ProFTPD 1.2 .0rc3 |
Discussion
ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
A vulnerability exists in ProFTPD when executing its shutdown routine. It has been reported that the main_exit() called during shutdown fails to sufficiently supply format specifiers for input. Under certain circumstances the input passed to the function may contain user-supplied input.
If this format bug were successfully exploited, an attacker may be able to create a situation in which arbitrary code execution may occur.
A vulnerability exists in ProFTPD when executing its shutdown routine. It has been reported that the main_exit() called during shutdown fails to sufficiently supply format specifiers for input. Under certain circumstances the input passed to the function may contain user-supplied input.
If this format bug were successfully exploited, an attacker may be able to create a situation in which arbitrary code execution may occur.
Exploit / POC
ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
Solution:
Mandrake Linux has released a security advisory (MDKSA-2001:21) which contains fixes.
Debian has released a security advisory (DSA-029-2) which contains fixes.
Conectiva Linux has released a security advisory (CLA-2001-380) which contains fixes.
Information on how to obtain and install available fixes can be found in the attached advisories.
The vendor has confirmed this issue and has released ProFTPD 1.2.0rc3 which addresses the problem. ProFTPD users are advised to upgrade as soon as possible.
ProFTPD Project ProFTPD 1.2 pre3
ProFTPD Project ProFTPD 1.2 pre1
ProFTPD Project ProFTPD 1.2 pre2
ProFTPD Project ProFTPD 1.2 pre9
ProFTPD Project ProFTPD 1.2 pre4
ProFTPD Project ProFTPD 1.2 pre5
ProFTPD Project ProFTPD 1.2 pre8
ProFTPD Project ProFTPD 1.2 pre7
ProFTPD Project ProFTPD 1.2 pre6
ProFTPD Project ProFTPD 1.2 pre10
Solution:
Mandrake Linux has released a security advisory (MDKSA-2001:21) which contains fixes.
Debian has released a security advisory (DSA-029-2) which contains fixes.
Conectiva Linux has released a security advisory (CLA-2001-380) which contains fixes.
Information on how to obtain and install available fixes can be found in the attached advisories.
The vendor has confirmed this issue and has released ProFTPD 1.2.0rc3 which addresses the problem. ProFTPD users are advised to upgrade as soon as possible.
ProFTPD Project ProFTPD 1.2 pre3
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre1
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre2
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre9
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre4
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre5
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre8
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre7
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre6
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
ProFTPD Project ProFTPD 1.2 pre10
-
ProFTPD Project proftpd-1.2.0rc3.tar.gz
ftp://ftp.proftpd.org/distrib/proftpd-1.2.0rc3.tar.gz
References
ProFTPD 1.2.0rc2 log_pri() Format String Vulnerability
References:
References: