Test ID:	1.3.6.1.4.1.25623.1.0.69496
Category:	Fedora Local Security Checks
Title:	Fedora Core 14 FEDORA-2011-5040 (proftpd)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to proftpd announced via advisory FEDORA-2011-5040. Update Information: This update, to the current upstream maintenance release, fixes a large number of bugs (see NEWS for details), and also a couple of security issues: * Plaintext command injection vulnerability in FTPS implementation (i.e. mod_tls). See http://bugs.proftpd.org/show_bug.cgi?id=3624 for details. * CVE-2011-1137 (badly formed SSH messages cause DoS). See http://bugs.proftpd.org/show_bug.cgi?id=3586 for details. References: [ 1 ] Bug #681718 - CVE-2011-1137 proftpd: integer overflow in mod_sftp https://bugzilla.redhat.com/show_bug.cgi?id=681718 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update proftpd' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-5040 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1137 BugTraq ID: 46183 http://www.securityfocus.com/bid/46183 Debian Security Information: DSA-2185 (Google Search) http://www.debian.org/security/2011/dsa-2185 http://www.exploit-db.com/exploits/16129/ http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058356.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058344.html http://secunia.com/advisories/43234 http://secunia.com/advisories/43635 http://secunia.com/advisories/43978 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.485806 http://www.vupen.com/english/advisories/2011/0617 http://www.vupen.com/english/advisories/2011/0857 Common Vulnerability Exposure (CVE) ID: CVE-2010-4652 44933 http://www.securityfocus.com/bid/44933 ADV-2011-0248 http://www.vupen.com/english/advisories/2011/0248 ADV-2011-0331 http://www.vupen.com/english/advisories/2011/0331 DSA-2191 http://www.debian.org/security/2011/dsa-2191 FEDORA-2011-0610 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053540.html FEDORA-2011-0613 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053537.html MDVSA-2011:023 http://www.mandriva.com/security/advisories?name=MDVSA-2011:023 http://bugs.proftpd.org/show_bug.cgi?id=3536 http://phrack.org/issues.html?issue=67&id=7#article http://proftpd.org/docs/RELEASE_NOTES-1.3.3d https://bugzilla.redhat.com/show_bug.cgi?id=670170 Common Vulnerability Exposure (CVE) ID: CVE-2010-4221 BugTraq ID: 44562 http://www.securityfocus.com/bid/44562 http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:227 http://www.zerodayinitiative.com/advisories/ZDI-10-229/ http://secunia.com/advisories/42052 http://secunia.com/advisories/42217 http://www.vupen.com/english/advisories/2010/2941 http://www.vupen.com/english/advisories/2010/2959 http://www.vupen.com/english/advisories/2010/2962 Common Vulnerability Exposure (CVE) ID: CVE-2010-3867 42047 http://secunia.com/advisories/42047 42052 42217 44562 ADV-2010-2853 http://www.vupen.com/english/advisories/2010/2853 ADV-2010-2941 ADV-2010-2959 ADV-2010-2962 FEDORA-2010-17091 FEDORA-2010-17098 FEDORA-2010-17220 MDVSA-2010:227 SSA:2010-305-03 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.498209 [oss-security] 20101101 Re: Proftpd pre-authentication buffer overflow in Telnet code http://www.openwall.com/lists/oss-security/2010/11/01/4 http://bugs.proftpd.org/show_bug.cgi?id=3519 http://www.proftpd.org/docs/NEWS-1.3.3c
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.