Ubuntu
proftpd-dfsg package

  1. Bug #310949
  2. Comment #3

Comment 3 for bug 310949

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Closing per note in our CVE tracker. If this is incorrect, please reopen:

 stefanlsd> After discussion with Francesco Paolo Lovergine <email address hidden>
   we concluded that this bug does not affect the Debian or Ubuntu versions of
   proftpd 1.3.1 or earlier. We believe the problems that this CVE affects were only
   introduced in the proftpd 1.3.2rc series. The exploit as found in the Bugs section
   was independently tested and shown to not apply.