CVE Reference: CVE-2010-3867

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2010-3867

Description:
Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.

CVE Status:
Candidate

References:

SLACKWARE
  http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.498209

SAID
  Secunia Advisory: SA42052
  Secunia Advisory: SA42047
  Secunia Advisory: SA42217

MLIST
  http://www.openwall.com/lists/oss-security/2010/11/01/4

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2010:227

FEDORA
  http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.html
  http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.html
  http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.html

DEBIAN
  http://www.debian.org/security/2011/dsa-2191

CONFIRM
  http://www.proftpd.org/docs/NEWS-1.3.3c
  http://bugs.proftpd.org/show_bug.cgi?id=3519

BID
  44562


Return to the previous page.