vsftpd bug fix and enhancement update - ALBA-2021:4175
Summary
ALBA-2021:4175: vsftpd bug fix and enhancement update. Affects vsftpd versions < 3.0.3-34.el8. Fixed in 3.0.3-34.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
vsftpd is a lightweight and secure FTP server for Unix-like systems. It provides support for FTP and FTPS protocols, ensuring secure file transfers over the network. This vulnerability affects vsftpd in AlmaLinux 8.
Vulnerability Detail
This vulnerability in vsftpd allows attackers to exploit a bug and gain unauthorized access to the system. The specific technical details of the vulnerability are not provided in the given information. However, it is important to note that this vulnerability has been fixed in version 3.0.3-34.el8 of the vsftpd package.
How To Fix
Minimum fixed version
3.0.3-34.el8
This is the first release that contains the fix.
sudo dnf update vsftpd
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vsftpd bug fix and enhancement update addresses a vulnerability that could allow unauthorized access to the system. It is recommended to update the vsftpd package to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for vsftpd →
FAQ
vsftpd is a lightweight and secure FTP server for Unix-like systems. It provides support for FTP and FTPS protocols, ensuring secure file transfers over the network.
This vulnerability allows attackers to exploit a bug in vsftpd and gain unauthorized access to the system.
To fix this vulnerability, update the vsftpd package to version 3.0.3-34.el8 or later.
No workaround is mentioned in the provided information.
For more information, refer to the AlmaLinux Release Notes linked in the References section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for vsftpd.