CVE-2010-4221

描述

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.

如何修補 CVE-2010-4221

要修補 CVE-2010-4221,請將受影響套件升級到下列已修補版本。

• Debian/proftpd-dfsg—升級至 1.3.3a-5 或更新版本

CVE-2010-4221 正在被利用嗎?

可能 — EPSS 為 91.3%,屬於高被利用機率區間,建議優先修補。

受影響套件(1)

• from 0, < 1.3.3a-5

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-4221