--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-3625
2010-11-04 16:05:43
--------------------------------------------------------------------------------
Name : proftpd
Product : Fedora EPEL 4
Version : 1.3.3c
Release : 1.el4
URL :
http://www.proftpd.org/
Summary : Flexible, stable and highly-configurable FTP server
Description :
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by xinetd instead are included.
--------------------------------------------------------------------------------
Update Information:
This is an update to the current upstream maintenance release, which addresses two
security issues that can be exploited by malicious users to manipulate certain data and
compromise a vulnerable system.
* A logic error in the code for processing user input containing the Telnet IAC (Interpret
As Command) escape sequence can be exploited to cause a stack-based buffer overflow by
sending specially crafted input to the FTP or FTPS service. Successful exploitation may
allow execution of arbitrary code. This has been assigned the name CVE-2010-4221. More
details can be found at
http://bugs.proftpd.org/show_bug.cgi?id=3521
* An input validation error within the "mod_site_misc" module can be exploited
to e.g. create and delete directories, create symlinks, and change the time of files
located outside a writable directory. Only configurations using "mod_site_misc",
which is not enabled by default, and where the attacker has write access to a directory,
are vulnerable to this issue, which has been assigned CVE-2010-3867. More details can be
found at
http://bugs.proftpd.org/show_bug.cgi?id=3519
The update from 1.3.2d to 1.3.3c also includes a large number of non-security bugfixes and
a number of additional loadable modules for enhanced functionality:
* mod_geoip
* mod_sftp
* mod_sftp_pam
* mod_sftp_sql
* mod_shaper
* mod_sql_passwd
* mod_tls_shmcache
There is also a new utility "ftpscrub" for scrubbing the scoreboard file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #651607 - CVE-2010-4221 proftpd: multiple stack-based buffer overflows in
pr_netio_telnet_gets()
https://bugzilla.redhat.com/show_bug.cgi?id=651607
[ 2 ] Bug #651602 - CVE-2010-3867 proftpd: multiple directory traversal vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=651602
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update proftpd' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------