Proftpd v1.3.5a Heap Overflow Vulnerability

Proftpd v1.3.5a Heap Overflow Vulnerability
Proftpd v1.3.5a Heap Overflow Vulnerability

Release date:
Updated on:

Affected Systems:

ProFTPD Project ProFTPD 1.3.5a

Description:

ProFTPD is an FTP server program on Unix or Unix-like platforms (such as Linux and FreeBSD.

ProFTPD v1.3.5a has a heap overflow vulnerability due to the allocation of mallocs with no length. After successful exploitation, it can overwrite any memory.

<* Source: Nicolas Lemonias

Link: http://seclists.org/bugtraq/2015/Nov/107
*>

Suggestion:

Vendor patch:

ProFTPD Project
---------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.proftpd.org/

[Translation] install ProFTPD on CentOS 7.0

Install and configure ProFTPD in Linux

ProFTPD FTP server configuration in Ubuntu 12.04

Install and build a ProFTPD server in Ubuntu

Solution for eight hours of Linux VPS vsftp/ProFTPD FTP Time Difference

How to configure the Proftpd server on Fedora 22

This article permanently updates the link address: