OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2003.043
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2003.043
Advisory Published:      2008-05-17 23:16 UTC

Issue Id (internal):     OpenPKG-SI-20030925.01
Issue First Created:     2003-09-25
Issue Last Modified:     2006-11-28
Issue Revision:          05


Subject Name:            ProFTPD
Subject Summary:         Professional FTP Daemon
Subject Home:            http://www.proftpd.net/
Subject Versions:        * <= 1.2.9rc2

Vulnerability Id:        CVE-2003-0831
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           arbitrary code execution

Description:
    According to an ISS X-Force security advisory [0], a vulnerability
    exists in the ProFTPD FTP server [1], versions between 1.2.7 and
    1.2.9rc2 (both inclusive). It can be triggered by remote attackers
    when transferring files from the FTP server in ASCII mode.
    
    To trigger the vulnerability, the attacker must have the ability to
    first upload a file to the server (not necessarily via FTP), and then
    attempt to download the same file via FTP. During ASCII transfer, file
    data is examined in 1024 byte chunks to check for newline characters.
    The translation of these newline characters is not handled correctly,
    and a buffer overflow can manifest if ProFTPD parses a specially
    crafted file.

References:
    [0] http://xforce.iss.net/xforce/alerts/id/154
    [1] http://www.proftpd.org/
    [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0831
    [3] http://www.openpkg.org/tutorial.html#regular-source
    [4] http://www.openpkg.org/tutorial.html#regular-binary
    [5] ftp://ftp.openpkg.org/release/1.2/UPD/proftpd-1.2.7-1.2.1.src.rpm
    [6] ftp://ftp.openpkg.org/release/1.3/UPD/proftpd-1.2.8-1.3.1.src.rpm
    [7] ftp://ftp.openpkg.org/release/1.2/UPD/
    [8] ftp://ftp.openpkg.org/release/1.3/UPD/
    [9] http://www.openpkg.org/security.html#signature


Primary Package Name:    proftpd
Primary Package Home:    http://openpkg.org/go/package/proftpd

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        1.2-SOLID         proftpd-1.2.7-1.2.0
OpenPKG Community        1.3-SOLID         proftpd-1.2.8-1.3.0
OpenPKG Community        CURRENT           proftpd-1.2.9rc2-20030911

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        1.2-SOLID         proftpd-1.2.7-1.2.1
OpenPKG Community        1.3-SOLID         proftpd-1.2.8-1.3.1
OpenPKG Community        CURRENT           proftpd-1.2.9rc2-20030923