CVE request for proftpd

[Vincent Danen <vdanen () redhat com>]

An SQL injection vulnerability in proftpd was reported on bugtraq
yesterday that could allow a user to login to proftpd with any password
if they use mysql for authentication (and, presumably, postgresql).

References:

http://www.securityfocus.com/archive/1/500823/30/0/threaded
http://bugs.gentoo.org/show_bug.cgi?id=258450
http://bugs.proftpd.org/show_bug.cgi?id=3180
https://bugzilla.redhat.com/show_bug.cgi?id=485125

Could we get a CVE name assigned please?

Thanks.

--
Vincent Danen / Red Hat Security Response Team