MNBSD-2009-0: lukemftpd command splitting allows long commands to be split into multiple commands

Severity: Unknown

Affected Package: lukemftpd

Summary: lukemftpd command splitting allows long commands to be split into multiple commands

Description

A flaw in lukemftpd(8) allowed long commands to be split into multiple commands, which could be abused for FTP command injection. The fix was applied to MidnightBSD 0.2.1 and 0.3-CURRENT. This corresponds to FreeBSD-SA-09:01.lukemftpd, which shares the same underlying FTP command-injection issue as the ftpd advisory (CVE-2008-4247).

Affected Versions

lukemftpd

Recommendations

No specific recommendations provided.

References

Additional Information

Aliases:

Published: January 10, 2009
Last Modified: January 10, 2009