FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-2390

This CVE name corresponds to:

Entered	Topic
2005-08-03	proftpd -- format string vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-2390 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-2390
Phase	Assigned(20050727)

Description

Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.

References

Source	Reference
CONFIRM	http://www.proftpd.org/docs/RELEASE_NOTES-1.3.0rc2
DEBIAN	DSA-795
OPENPKG	OpenPKG-SA-2005.020
BID	14380
BID	14381
SECUNIA	16181