portage-ng / portage / net-ftp / vsftpd / 3.0.5-r2
portage-ng glsa
1 advisory reference net-ftp/vsftpd · none place version 3.0.5-r2 in a vulnerable range
▸ GLSA 201110-07 vsftpd: Denial of service this version unaffected normal remote 2011-10-10

A Denial of Service vulnerability was found in vsftpd.

Announced
2011-10-10
Revised
2011-10-10
Access
remote
Bugs
#357001
Advisory
https://security.gentoo.org/glsa/201110-07

Affected packages

PackageArchVulnerableUnaffected
net-ftp/vsftpd*< 2.3.4>= 2.3.4

Background

vsftpd is a very secure FTP daemon written with speed, size and security in mind.

Description

A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details.

Impact

A remote authenticated attacker could cause a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All vsftpd users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-ftp/vsftpd-2.3.4"

References