[Technik] [SECURITY] [DSA 1245-1] New proftpd packages fix denial of service

[Noèl Köthe]

Am Sonntag, den 07.01.2007, 13:33 +0100 schrieb Moritz Muehlenhoff:

> Debian Security Advisory DSA 1245-1                    security at debian.org
> http://www.debian.org/security/                         Moritz Muehlenhoff
> January 7th, 2006                       http://www.debian.org/security/faq
> 
> Package        : proftpd
> Vulnerability  : programming error
> Problem-Type   : remote
> Debian-specific: no
> CVE ID         : CVE-2005-4816
> Debian Bug     : 404751

proftpd auf h01, h02, h03 und h04 aktualisiert.

> For the stable distribution (sarge) this problem has been fixed in
> version 1.2.10-15sarge4.

changelog:
proftpd (1.2.10-15sarge4) stable-security; urgency=high

  Fixes a buffer overflow for mod_radius, found in 1.2.10 and missed before releasing.

  http://www.securityfocus.com/bid/16535
  http://bugs.proftpd.org/show_bug.cgi?id=2658

  Patch:

  35.CVE_2005_4816

 -- Francesco Paolo Lovergine <frankie at debian.org>  Thu, 28 Dec 2006 09:18:27 +0100

-- 
Noèl Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /archiv/technik/attachments/20070107/0d3b8bdd/attachment.pgp