Bug 11558 - ProFTPD Auth API Multiple Authentication Modules Security Issue
Summary: ProFTPD Auth API Multiple Authentication Modules Security Issue
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: proftpd (show other bugs)
Version: unstable
Hardware: all Linux
: P2 normal
Assignee: Konstantin A Lepikhov (L.A. Kostis)
QA Contact: qa-sisyphus
URL: http://bugs.proftpd.org/show_bug.cgi?...
Keywords:
Depends on:
Blocks:
 
Reported: 2007-04-18 15:13 MSD by Vladimir V. Kamarzin
Modified: 2008-02-28 15:41 MSK (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir V. Kamarzin 2007-04-18 15:13:03 MSD 
SOFTWARE:
ProFTPD 1.3.x
http://secunia.com/product/5430/
ProFTPD 1.2.x
http://secunia.com/product/1250/

DESCRIPTION:
A security issue has been reported in ProFTPD, which potentially can
be exploited by malicious people to bypass certain security
restrictions.

The security issue is caused due to an error within ProFTPD's Auth
API. If multiple authentication modules are used, it is possible that
one module provides data, which is then authenticated against another
module. This can e.g. be exploited to bypass certain security
restrictions if authentication modules are configured with different
policies.

SOLUTION:
Fixed in the CVS repository.

PROVIDED AND/OR DISCOVERED BY:
Evgeni Golov

ORIGINAL ADVISORY:
ProFTPD:
http://bugs.proftpd.org/show_bug.cgi?id=2922

Debian:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419255
Comment 1 Konstantin A Lepikhov (L.A. Kostis) 2007-05-16 15:33:52 MSD 
Fixed in proftpd-1.3.0rel-alt2.