Test Kennung:	1.3.6.1.4.1.25623.1.0.57722
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2006:232 (proftpd)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to proftpd announced via advisory MDKSA-2006:232. Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value. Packages have been patched to correct these issues. Affected: 2007.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:232 Risk factor : High CVSS Score: 6.6
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6563 BugTraq ID: 21587 http://www.securityfocus.com/bid/21587 Bugtraq: 20061213 CORE-2006-1127: ProFTPD Controls Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/454320/100/0/threaded Bugtraq: 20070219 ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Google Search) http://www.securityfocus.com/archive/1/460648/100/0/threaded Bugtraq: 20070221 Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Google Search) http://www.securityfocus.com/archive/1/460756/100/0/threaded https://www.exploit-db.com/exploits/3330 http://security.gentoo.org/glsa/glsa-200702-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:232 http://www.coresecurity.com/?module=ContentMod&action=item&id=1594 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html http://secunia.com/advisories/23371 http://secunia.com/advisories/23392 http://secunia.com/advisories/23473 http://secunia.com/advisories/24163 http://www.trustix.org/errata/2006/0074/ http://www.vupen.com/english/advisories/2006/4998 XForce ISS Database: proftpd-controls-bo(30906) https://exchange.xforce.ibmcloud.com/vulnerabilities/30906
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.