Check Point Advisories

Preemptive Protection against ProFTPD with mod_sql pre-authentication Vulnerability

Check Point Reference:	CPAI-2010-169
Date Published:	6 Dec 2010
Severity:	Critical
Last Updated:	Friday 01 January, 2010
Source:	http://www.phrack.org/issues.html?issue=67&id=7#article
Protection Provided by:
Who is Vulnerable?	ProFTPD 1.3.2rc2
Vulnerability Description	A pre-authentication remote root heap overflow vulnerability was reported in the ProFTPD FTP Server. ProFTPD is a configurable GPL-licensed FTP server software.
Vulnerability Details	The vulnerability is an unbounded copy operation in sql_prepare_where().