Family: Debian Local Security Checks --> Category: infos
[DSA510] DSA-510-1 jftpgw Vulnerability Scan
Vulnerability Scan Summary
Detailed Explanation for this Vulnerability Test
firstname.lastname@example.org discovered a vulnerability in jftpgw, an FTP
proxy program, whereby a remote user could potentially cause arbitrary
code to be executed with the rights of the jftpgw server process.
By default, the server runs as user "nobody".
CVE-2004-0448: format string vulnerability via syslog(3) in log()
For the current stable distribution (woody) this problem has been
fixed in version 0.13.1-1woody1.
For the unstable distribution (sid), this problem has been fixed in
We recommend that you update your jftpgw package.
Solution : http://www.debian.org/security/2004/dsa-510
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.