ProFTPD Access Control List bypass vulnerability — GLSA 200405-09

Version 1.2.9 of ProFTPD introduced a vulnerability that causes CIDR-based Access Control Lists (ACLs) to be treated as "AllowAll", thereby allowing remote users full access to files available to the FTP daemon.

Affected Packages

net-ftp/proftpd on all architectures
Affected versions = 1.2.9-r1, = 1.2.9
Unaffected versions >= 1.2.9-r2

Background

ProFTPD is an FTP daemon.

Description

ProFTPD 1.2.9 introduced a vulnerability that allows CIDR-based ACLs (such as 10.0.0.1/24) to be bypassed. The CIDR ACLs are disregarded, with the net effect being similar to an "AllowAll" directive.

Impact

This vulnerability may allow unauthorized files, including critical system files to be downloaded and/or modified, thereby allowing a potential remote compromise of the server.

Workaround

Users may work around the problem by avoiding use of CIDR-based ACLs.

Resolution

ProFTPD users are encouraged to upgrade to the latest version of the package:

 # emerge sync

 # emerge -pv ">=net-ftp/proftpd-1.2.9-r2"
 # emerge ">=net-ftp/proftpd-1.2.9-r2"

References

Release Date
May 19, 2004

Latest Revision
May 19, 2004: 01

Severity
high

Exploitable
remote

Bugzilla entries