Test ID:	1.3.6.1.4.1.25623.1.0.50521
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2004:041 (proftpd)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to proftpd announced via advisory MDKSA-2004:041. A portability workaround that was applied in version 1.2.9 of the ProFTPD FTP server caused CIDR based ACL entries in Allow and Deny directives to act like an AllowAll directive. This granted FTP clients access to files and directories that the server configuration may have been explicitly denying. This problem only exists in version 1.2.9 and has been fixed upstream. A patch has been applied to correct the problem. Affected versions: 10.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2004:041 http://bugs.proftpd.org/show_bug.cgi?id=2267 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.