glsa-200511-11.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsa id="200511-11">
  <title>linux-ftpd-ssl: Remote buffer overflow</title>
  <synopsis>
    A buffer overflow vulnerability has been found, allowing a remote attacker
    to execute arbitrary code with escalated privileges on the local system.
  </synopsis>
  <product type="ebuild">linux-ftpd-ssl</product>
  <announced>2005-11-13</announced>
  <revised count="02">2007-12-30</revised>
  <bug>111573</bug>
  <access>remote</access>
  <affected>
    <package name="net-ftp/netkit-ftpd" auto="yes" arch="*">
      <unaffected range="ge">0.17-r3</unaffected>
      <vulnerable range="lt">0.17-r3</vulnerable>
    </package>
  </affected>
  <background>
    <p>
    linux-ftpd-ssl is the netkit FTP server with encryption support.
    </p>
  </background>
  <description>
    <p>
    A buffer overflow vulnerability has been found in the
    linux-ftpd-ssl package. A command that generates an excessively long
    response from the server may overrun a stack buffer.
    </p>
  </description>
  <impact type="high">
    <p>
    An attacker that has permission to create directories that are
    accessible via the FTP server could exploit this vulnerability.
    Successful exploitation would execute arbitrary code on the local
    machine with root privileges.
    </p>
  </impact>
  <workaround>
    <p>
    There is no known workaround at this time.
    </p>
  </workaround>
  <resolution>
    <p>
    All ftpd users should upgrade to the latest version:
    </p>
    <code>
    # emerge --sync
    # emerge --ask --oneshot --verbose "&gt;=net-ftp/netkit-ftpd-0.17-r3"</code>
  </resolution>
  <references>
    <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3524">CVE-2005-3524</uri>
  </references>
  <metadata tag="requester" timestamp="2005-11-06T18:51:48Z">
    koon
  </metadata>
  <metadata tag="submitter" timestamp="2005-11-06T21:31:18Z">
    shellsage
  </metadata>
  <metadata tag="bugReady" timestamp="2005-11-12T21:51:01Z">
    adir
  </metadata>
</glsa>