oval:org.mitre.oval:def:13366

Definition Id: oval:org.mitre.oval:def:13366

Oval ID:	oval:org.mitre.oval:def:13366
Title:	DSA-1925-1 proftpd-dfsg -- insufficient input validation
Description:	It has been discovered that proftpd-dfsg, a virtual-hosting FTP daemon, does not properly handle a "\0" character in a domain name in the Subject Alternative Name field of an X.509 client certificate, when the dNSNameRequired TLS option is enabled. For the stable distribution, this problem has been fixed in version 1.3.1-17lenny4. For the oldstable distribution, this problem has been fixed in version 1.3.0-19etch3. Binaries for the amd64 architecture will be released once they are available. For the testing distribution and the unstable distribution , this problem has been fixed in version 1.3.2a-2. We recommend that you upgrade your proftpd-dfsg packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1925-1 CVE-2009-3639	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	proftpd-dfsg
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section proftpd-pgsql DPKG is earlier than 1.3.0-19etch3 AND proftpd-doc DPKG is earlier than 1.3.0-19etch3 AND proftpd-ldap DPKG is earlier than 1.3.0-19etch3 AND proftpd-mysql DPKG is earlier than 1.3.0-19etch3 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is hppa AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND proftpd DPKG is earlier than 1.3.0-19etch3 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section proftpd-pgsql DPKG is earlier than 1.3.0-19etch3 AND proftpd-doc DPKG is earlier than 1.3.0-19etch3 AND proftpd-ldap DPKG is earlier than 1.3.0-19etch3 AND proftpd-mysql DPKG is earlier than 1.3.0-19etch3 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is hppa AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND proftpd DPKG is earlier than 1.3.0-19etch3

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:13366

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:13366

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0655s

Facebook rss twitter linkedin mail