Packages
- vsftpd - lightweight, efficient FTP server written for security
Details
It was discovered that vsftpd incorrectly handled certain glob expressions.
A remote authenticated user could use a crafted glob expression to cause
vftpd to consume all resources, leading to a denial of service.
It was discovered that vsftpd incorrectly handled certain glob expressions.
A remote authenticated user could use a crafted glob expression to cause
vftpd to consume all resources, leading to a denial of service.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 9.10 karmic | vsftpd – 2.2.0-1ubuntu2.1 | ||
| 8.04 hardy | vsftpd – 2.0.6-1ubuntu1.2 | ||
| 6.06 dapper | vsftpd – 2.0.4-0ubuntu4.1 | ||
| 10.10 maverick | vsftpd – 2.3.0~pre2-4ubuntu2.2 | ||
| 10.04 lucid | vsftpd – 2.2.2-3ubuntu6.1 | ||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.