- Vulnerability/
- USN-6379-1
USN-6379-1: vsftpd vulnerability
First published: Mon Sep 18 2023(Updated: )
It was discovered that vsftpd was vulnerable to the ALPACA TLS protocol content confusion attack. A remote attacker could possibly use this issue to redirect traffic from one subdomain to another.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/vsftpd | <3.0.5-0ubuntu0.20.04.1 | 3.0.5-0ubuntu0.20.04.1 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vsftpd vulnerability?
The vulnerability ID for this vsftpd vulnerability is USN-6379-1.
What is the title of this vulnerability?
The title of this vulnerability is 'USN-6379-1: vsftpd vulnerability'.
What is the description of this vulnerability?
This vulnerability in vsftpd is related to the ALPACA TLS protocol content confusion attack, which can allow a remote attacker to redirect traffic from one subdomain to another.
Which software is affected by this vulnerability?
The vsftpd package with a version up to and excluding 3.0.5-0ubuntu0.20.04.1 is affected on Ubuntu Ubuntu 20.04.
How can I fix this vulnerability?
To fix this vulnerability, you should update the vsftpd package to version 3.0.5-0ubuntu0.20.04.1 or higher.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-5371-1
- anchor-related/USN-5371-2
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04