CVE-2012-6095 in ProFTPD
Summary
ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.
Reservation
12/06/2012
Disclosure
01/24/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7456 | ProFTPD race condition | 362 | Not defined | Official fix | CVE-2012-6095 |
| 7244 | ProFTPD MKD/XMKD race condition | 362 | Proof-of-Concept | Official fix | CVE-2012-6095 |