Vulnerability   
Search   
    Search 187964 CVE descriptions
and 85075 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.877840
Category:Fedora Local Security Checks
Title:Fedora: Security Advisory for pure-ftpd (FEDORA-2020-fa83ea0492)
Summary:The remote host is missing an update for the 'pure-ftpd'; package(s) announced via the FEDORA-2020-fa83ea0492 advisory.
Description:Summary:
The remote host is missing an update for the 'pure-ftpd'
package(s) announced via the FEDORA-2020-fa83ea0492 advisory.

Vulnerability Insight:
Pure-FTPd is a fast, production-quality, standard-comformant FTP server,
based upon Troll-FTPd. Unlike other popular FTP servers, it has no known
security flaw, it is really trivial to set up and it is especially designed
for modern Linux and FreeBSD kernels (setfsuid, sendfile, capabilities) .
Features include PAM support, IPv6, chroot()ed home directories, virtual
domains, built-in LS, anti-warez system, bandwidth throttling, FXP, bounded
ports for passive downloads, UL/DL ratios, native LDAP and SQL support,
Apache log files and more.
Rebuild switches:

- -without ldap disable ldap support

- -without mysql disable mysql support

- -without pgsql disable postgresql support

- -without extauth disable external authentication

- -without tls disable SSL/TLS

Affected Software/OS:
'pure-ftpd' package(s) on Fedora 30.

Solution:
Please install the updated package(s).

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-9365
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5DBVHJCXWRSJPNJQCJQCKZF6ZDPZCKA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5NSUDWXZVWUCL6R2PTX3KBB42Z62CA5/
https://security.gentoo.org/glsa/202003-54
https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e
Common Vulnerability Exposure (CVE) ID: CVE-2020-9274
https://github.com/jedisct1/pure-ftpd/commit/8d0d42542e2cb7a56d645fbe4d0ef436e38bcefa
https://www.pureftpd.org/project/pure-ftpd/news/
https://lists.debian.org/debian-lts-announce/2020/02/msg00029.html
https://usn.ubuntu.com/4515-1/
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.