USN-1098-1: vsftpd vulnerability

Releases

• Ubuntu 10.10
• Ubuntu 10.04
• Ubuntu 9.10
• Ubuntu 8.04
• Ubuntu 6.06

Packages

• vsftpd - lightweight, efficient FTP server written for security

Details

It was discovered that vsftpd incorrectly handled certain glob expressions.
A remote authenticated user could use a crafted glob expression to cause
vftpd to consume all resources, leading to a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• vsftpd - 2.2.0-1ubuntu2.1

Ubuntu 8.04

• vsftpd - 2.0.6-1ubuntu1.2

Ubuntu 6.06

• vsftpd - 2.0.4-0ubuntu4.1

Ubuntu 10.10

• vsftpd - 2.3.0~pre2-4ubuntu2.2

Ubuntu 10.04

• vsftpd - 2.2.2-3ubuntu6.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2011-0762