ID de Prueba:	1.3.6.1.4.1.25623.1.0.57722
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:232 (proftpd)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to proftpd announced via advisory MDKSA-2006:232. Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value. Packages have been patched to correct these issues. Affected: 2007.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:232 Risk factor : High CVSS Score: 6.6
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6563 BugTraq ID: 21587 http://www.securityfocus.com/bid/21587 Bugtraq: 20061213 CORE-2006-1127: ProFTPD Controls Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/454320/100/0/threaded Bugtraq: 20070219 ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Google Search) http://www.securityfocus.com/archive/1/460648/100/0/threaded Bugtraq: 20070221 Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit (Google Search) http://www.securityfocus.com/archive/1/460756/100/0/threaded https://www.exploit-db.com/exploits/3330 http://security.gentoo.org/glsa/glsa-200702-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:232 http://www.coresecurity.com/?module=ContentMod&action=item&id=1594 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html http://secunia.com/advisories/23371 http://secunia.com/advisories/23392 http://secunia.com/advisories/23473 http://secunia.com/advisories/24163 http://www.trustix.org/errata/2006/0074/ http://www.vupen.com/english/advisories/2006/4998 XForce ISS Database: proftpd-controls-bo(30906) https://exchange.xforce.ibmcloud.com/vulnerabilities/30906
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.