Test ID:	1.3.6.1.4.1.25623.1.0.63128
Category:	Fedora Local Security Checks
Title:	Fedora Core 8 FEDORA-2009-0195 (proftpd)
Summary:	The remote host is missing an update to proftpd;announced via advisory FEDORA-2009-0195.;Note: This VT has been deprecated and is therefore no longer functional.
Description:	Summary: The remote host is missing an update to proftpd announced via advisory FEDORA-2009-0195. Note: This VT has been deprecated and is therefore no longer functional. Vulnerability Insight: Update Information: This update fixes a security issue where an attacker could conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands. It also fixes some SSL shutdown issues seen with certain clients. ChangeLog: * Fri Jan 2 2009 Matthias Saou 1.3.1-8 - Update default configuration to have a lit of available modules and more example configuration for them. - Include patches to fix TLS issues (#457280). * Fri Jan 2 2009 Matthias Saou 1.3.1-7 - Add Debian patch to fix CSRF vulnerability (#464127, upstream #3115). Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update proftpd' at the command line. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4242 BugTraq ID: 31289 http://www.securityfocus.com/bid/31289 Debian Security Information: DSA-1689 (Google Search) http://www.debian.org/security/2008/dsa-1689 https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00078.html https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00245.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 http://www.securitytracker.com/id?1020945 http://secunia.com/advisories/31930 http://secunia.com/advisories/33261 http://secunia.com/advisories/33413 http://securityreason.com/securityalert/4313 http://securityreason.com/achievement_securityalert/56 XForce ISS Database: proftpd-url-csrf(45274) https://exchange.xforce.ibmcloud.com/vulnerabilities/45274
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.