Description
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
References
- 10252 vdb-entry
- proftpd-cidr-acl-bypass(16038) vdb-entry
- 20040430 [OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd) mailing-list
- http://bugs.proftpd.org/show_bug.cgi?id=2267
- 2004-0025 vendor-advisory
- 11527 third-party-advisory
- MDKSA-2004:041 vendor-advisory