Debian/proftpd-dfsg: unknown
The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Altern
Action: Upgrade proftpd-dfsg to 1.3.2a-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2a-2 | - |
Fixed versions
| 1.3.2a-2 |
Sources
- osv: DEBIAN-CVE-2009-3639#Debian:14/proftpd-dfsg
- https://security-tracker.debian.org/tracker/CVE-2009-3639
published · modified · JSON