Red Hat Security AdvisoryRHSA-2011:0337
vsftpd security update
Released 2011-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) vsftpd-2.0.5-16.el5_6.1, vsftpd-2.0.5-16.el5_6.1.i386, vsftpd-2.0.5-16.el5_6.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 vsftpd-2.0.1-9.el4, vsftpd-2.0.1-9.el4.i386, vsftpd-2.0.1-9.el4.ia64 +1
- Red Hat Enterprise Linux ES version 4 vsftpd-2.0.1-9.el4, vsftpd-2.0.1-9.el4.i386, vsftpd-2.0.1-9.el4.ia64
- Red Hat Enterprise Linux Server (v. 6) vsftpd-2.2.2-6.el6_0.1
- Red Hat Enterprise Linux Workstation (v. 6) vsftpd-2.2.2-6.el6_0.1
Fixes 1 record
Priority MEDIUM 57
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT com…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.73946 · Published 2011-03-02 · Fixed CWE-400
