|
|
Family: Debian Local Security Checks --> Category: infos
[DSA510] DSA-510-1 jftpgw Vulnerability Scan
Vulnerability Scan Summary
DSA-510-1 jftpgw
Detailed Explanation for this Vulnerability Test
jaguar@felinemenace.org discovered a vulnerability in jftpgw, an FTP
proxy program, whereby a remote user could potentially cause arbitrary
code to be executed with the rights of the jftpgw server process.
By default, the server runs as user "nobody".
CVE-2004-0448: format string vulnerability via syslog(3) in log()
function
For the current stable distribution (woody) this problem has been
fixed in version 0.13.1-1woody1.
For the unstable distribution (sid), this problem has been fixed in
version 0.13.4-1.
We recommend that you update your jftpgw package.
Solution : http://www.debian.org/security/2004/dsa-510
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
