Pure-FTPd: Multiple vulnerabilities

Pure-FTPd: Multiple vulnerabilities Multiple vulnerabilities were found in Pure-FTPd allowing attackers to inject FTP commands or cause a Denial of Service. Pure-FTPd October 26, 2011 October 26, 2011: 1 358375 365751 remote 1.0.32 1.0.32

Pure-FTPd is a fast, production-quality and standards-compliant FTP server.

Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details.

Remote unauthenticated attackers may be able to inject FTP commands or cause a Denial of Service.

There is no known workaround at this time.

All pure-ftpd users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-ftp/pure-ftpd-1.0.32"

NOTE: This is a legacy GLSA. Updates for all affected architectures are available since May 14, 2011. It is likely that your system is already no longer affected by this issue.

CVE-2011-0418 CVE-2011-1575 underling underling