Bugtraq mailing list archives

Re: [proftpd-l] root compromise ? (fwd)


From: sky () WIBBLE NET (Nic Bellamy)
Date: Mon, 15 Feb 1999 20:36:33 +1300


On Sun, 14 Feb 1999, Dirk Moerenhout wrote:

Proftpd 1.2.0pre1 is not patched. If it is, then it is very weird that
there is a patch on the ftp-site for this problem.

ProFTPd 1.2.0pre2 is available from ftp://ftp.proftpd.org/distrib/ - it
fixes this particular problem, and a few others (including a memory leak
when doing `ls -lR' that could have easily been used as a DoS attack).

So, forget the patches, just upgrade :-)

Regards,
        Nic.

#include ".signature"



Current thread: