CVE-2012-6095 in ProFTPD
Zusammenfassung (Englisch)
ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
06.12.2012
Veröffentlichung
24.01.2013
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 7456 | ProFTPD Race Condition | 362 | Nicht definiert | Offizieller Fix | CVE-2012-6095 |
| 7244 | ProFTPD MKD/XMKD Race Condition | 362 | Proof-of-Concept | Offizieller Fix | CVE-2012-6095 |