*** This bug is a duplicate of bug 1462311 ***
https://bugs.launchpad.net/bugs/1462311
Public bug reported:
Hi and thanks for maintaining proftpd. We're seeing active exploitation
of CVE-2015-3306 on standard proftpd installs (Ubuntu 12.04 and 14.04).
Is there a particular reason there has not been a release yet? CVE
details were released 2015-05-22.
See also:
http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-3306.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3306
https://www.exploit-db.com/exploits/36742/
http://bugs.proftpd.org/show_bug.cgi?id=4169
Ciao,
Willem
** Affects: proftpd-dfsg (Ubuntu)
Importance: Undecided
Status: New
** Information type changed from Private Security to Public
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1470259
Title:
Critical security fix for CVE-2015-3306
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/1470259/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
