Processed: Re: Bug#609703: proftpd-basic: sql_prepare_where() buffer overflow (Bug#3536)

2011-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 609703 normal Bug #609703 [proftpd-basic] proftpd-basic: sql_prepare_where() buffer overflow (Bug#3536) Severity set to 'normal' from 'critical' > thanks Stopping processing here. Please contact me if you need assistance. -- 609703: h

Bug#609703: proftpd-basic: sql_prepare_where() buffer overflow (Bug#3536)

2011-01-12 Thread Francesco P. Lovergine
severity 609703 normal thanks On Tue, Jan 11, 2011 at 07:18:23PM +0100, Sebastian Scheible wrote: > Package: proftpd-basic > Version: 1.3.1-17lenny4 > Severity: critical > Tags: security > Justification: root security hole > > As described in > http://www.h-online.com/open/news/item/Phrack-hole-c

Bug#609703: proftpd-basic: sql_prepare_where() buffer overflow (Bug#3536)

2011-01-11 Thread Sebastian Scheible
Package: proftpd-basic Version: 1.3.1-17lenny4 Severity: critical Tags: security Justification: root security hole As described in http://www.h-online.com/open/news/item/Phrack-hole-closed-in-ProFTPD-1156782.html upstream version 1.3.3d fixes a remote root exploit in previous versions (proftpd