[ GLSA 201110-07 ] vsftpd: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: vsftpd: Denial of Service (GLSA 201110-07)
Severity: normal
Exploitable: remote
Date: October 10, 2011
Bug(s): #357001
ID: 201110-07

Synopsis

A Denial of Service vulnerability was found in vsftpd.

Background

vsftpd is a very secure FTP daemon written with speed, size and security
in mind.


Affected Packages

Package: net-ftp/vsftpd
Vulnerable: < 2.3.4
Unaffected: >= 2.3.4
Architectures: All supported architectures


Description

A Denial of Service vulnerability was discovered in vsftpd. Please
review the CVE identifier referenced below for details.


Impact

A remote authenticated attacker could cause a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All vsftpd users should upgrade to the latest version: