[ GLSA 201110-25 ] Pure-FTPd: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Pure-FTPd: Multiple vulnerabilities (GLSA 201110-25)
Severity: normal
Exploitable: remote
Date: October 26, 2011
Bug(s): #358375, #365751
ID: 201110-25

Synopsis

Multiple vulnerabilities were found in Pure-FTPd allowing attackers
to inject FTP commands or cause a Denial of Service.


Background

Pure-FTPd is a fast, production-quality and standards-compliant FTP
server.


Affected Packages

Package: net-ftp/pure-ftpd
Vulnerable: < 1.0.32
Unaffected: >= 1.0.32
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Pure-FTPd. Please
review the CVE identifiers referenced below for details.


Impact

Remote unauthenticated attackers may be able to inject FTP commands or
cause a Denial of Service.


Workaround

There is no known workaround at this time.

Resolution

All pure-ftpd users should upgrade to the latest version: