|
|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2002:005: proftpd Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the proftpd package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2002:005 (proftpd).
Matthew S. Hallacy discovered that ProFTPD was not forward resolving
reverse-resolved hostnames. A remote attacker could exploit this to bypass
ProFTPD access controls or have false information logged. Frank Denis discovered
that a remote attacker could send malicious commands to the ProFTPD server and
it would force the process to consume all CPU and memory resources available to
it. This DoS vulnerability could bring the server down with repeated attacks.
Finally, Mattias found a segmentation fault problem that is considered by the
developers to be unexploitable.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2002:005
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
