Summary: | net-ftp/proftpd: mod_ctrls Privilege Escalation (CVE-2006-6563) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Matt Drew (RETIRED) <aetius> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | chtekk |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.coresecurity.com/?module=ContentMod&action=item&id=1594 | ||
Whiteboard: | C1 [glsa] aetius | ||
Package list: | Runtime testing required: | --- |
Description
Matt Drew (RETIRED)
2006-12-14 04:33:36 UTC
fixing summary. /* (no) comment */ net-ftp/proftpd-1.3.1_rc1 is in the tree, fixing all the known vulns and bugs we had to patch before, and it seems to work very well, so do your magic, security team and archs! ;) Best regards, CHTEKK. PS: we pass --enable-ctrls by default, so I'm pretty sure we have mod_ctrls or at least the sending of controls enabled by default (bug was in src/ctrls.c). Hi arches team, please test mark stable if appropriate: net-ftp/proftpd-1.3.1_rc1 ppc stable ppc64 stable sparc stable. *poof* Alpha stable. Stable on hppa. Sorry for delay. pinging amd64. amd64 stable Late ! :((( GLSA request filed. GLSA 200702-02, thanks to everybody. |