Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Mandrake Local Security Checks --> Category: infos

MDKSA-2002:005: proftpd Vulnerability Scan

Vulnerability Scan Summary
Check for the version of the proftpd package

Detailed Explanation for this Vulnerability Test

The remote host is missing the patch for the advisory MDKSA-2002:005 (proftpd).

Matthew S. Hallacy discovered that ProFTPD was not forward resolving
reverse-resolved hostnames. A remote attacker could exploit this to bypass
ProFTPD access controls or have false information logged. Frank Denis discovered
that a remote attacker could send malicious commands to the ProFTPD server and
it would force the process to consume all CPU and memory resources available to
it. This DoS vulnerability could bring the server down with repeated attacks.
Finally, Mattias found a segmentation fault problem that is considered by the
developers to be unexploitable.

Solution :
Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.