Description
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
References
- GLSA-200502-26 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=81894