REDHAT-BUG-670170: Buffer Overflow
A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the modsql module was enabled. A remote, unauthenticated attacker could use this flaw to cause proftpd daemon to crash or, potentially, to execute arbitrary code with the privileges of the user running 'proftpd' via a specially-crafted username, provided in the authentication dialog.
Upstream bug report: [1] http://bugs.proftpd.org/showbug.cgi?id=3536
References: [2] http://www.securityfocus.com/bid/44933 [3] http://phrack.org/issues.html?issue=67&id=7#article [4] http://bugs.gentoo.org/showbug.cgi?id=348998 [5] http://proftpd.org/docs/RELEASENOTES-1.3.3d (ProFTPD v1.3.3d release notes)
CVE identifier: [6] http://www.openwall.com/lists/oss-security/2011/01/14/6
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-670170?
The severity of REDHAT-BUG-670170 is high due to the potential for remote code execution or server crashes.
How do I fix REDHAT-BUG-670170?
To mitigate REDHAT-BUG-670170, upgrade ProFTPD to a patched version that resolves this heap-based buffer overflow vulnerability.
Who is affected by REDHAT-BUG-670170?
Users of ProFTPD version 1.3.3d with the mod_sql module enabled are affected by REDHAT-BUG-670170.
What might an attacker exploit in REDHAT-BUG-670170?
An attacker could exploit REDHAT-BUG-670170 to potentially execute arbitrary code or crash the ProFTPD daemon.
Is authentication required to exploit REDHAT-BUG-670170?
No, exploitation of REDHAT-BUG-670170 can be achieved by a remote, unauthenticated attacker.