CVE-2019-19270: High severity proftpd vulnerability
An issue was discovered in tlsverifycrl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19270?
The severity of CVE-2019-19270 is high with a severity value of 7.5.
How does CVE-2019-19270 impact ProFTPD?
CVE-2019-19270 impacts ProFTPD versions 1.3.5 and 1.3.6, potentially allowing clients with invalid certificates to be accepted.
How can I check if my ProFTPD version is affected by CVE-2019-19270?
You can check if your ProFTPD version is affected by CVE-2019-19270 by verifying if it is either 1.3.5 or 1.3.6.
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-19270?
The Common Weakness Enumeration (CWE) ID for CVE-2019-19270 is CWE-295.
Are there any references available for CVE-2019-19270?
Yes, there are references available for CVE-2019-19270. You can find them at: [reference 1], [reference 2], [reference 3].