ID de Prueba:	1.3.6.1.4.1.25623.1.0.63558
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200903-27 (proftpd)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200903-27.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200903-27. Vulnerability Insight: Two vulnerabilities in ProFTPD might allow for SQL injection attacks. Solution: All ProFTPD users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-ftp/proftpd-1.3.2' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0542 Bugtraq: 20090210 Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Google Search) http://www.securityfocus.com/archive/1/500823/100/0/threaded Bugtraq: 20090210 ProFTPd with mod_mysql Authentication Bypass Exploit (Google Search) http://www.securityfocus.com/archive/1/500851/100/0/threaded Bugtraq: 20090210 Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Google Search) http://www.securityfocus.com/archive/1/500833/100/0/threaded Bugtraq: 20090211 Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) (Google Search) http://www.securityfocus.com/archive/1/500852/100/0/threaded Debian Security Information: DSA-1730 (Google Search) http://www.debian.org/security/2009/dsa-1730 https://www.exploit-db.com/exploits/8037 http://security.gentoo.org/glsa/glsa-200903-27.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 http://www.openwall.com/lists/oss-security/2009/02/11/1 http://www.openwall.com/lists/oss-security/2009/02/11/3 http://www.openwall.com/lists/oss-security/2009/02/11/5 http://secunia.com/advisories/34268 Common Vulnerability Exposure (CVE) ID: CVE-2009-0543 http://www.openwall.com/lists/oss-security/2009/02/11/4
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.