NVD Vulnerability Detail

CVE-2011-1137

Summary	Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
Publication Date	March 12, 2011, 2:55 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:25 a.m.

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:proftpd:proftpd:1.2.0:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:b::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.1:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:a::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.1:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.3:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.0:a::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:pre10::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:d::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:c::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.1:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.8:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.3:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.10:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.1:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.1:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc5::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:a::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.4:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.5:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:e::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:c::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.7:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.8:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:pre9::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:rc3::::::
cpe:2.3:a:proftpd:proftpd::d::::::*		1.3.3
cpe:2.3:a:proftpd:proftpd:1.3.2:b::::::
cpe:2.3:a:proftpd:proftpd:1.2.6:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.2:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.8:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.6:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.6:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.3:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc3::::::

Related information, measures and tools

No	URL	タグ
1	http://bugs.proftpd.org/show_bug.cgi?id=3586	Patch
2	http://bugs.proftpd.org/show_bug.cgi?id=3587
3	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058344.html
4	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058356.html
5	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/mod_sftp.c?r1=1.29.2.1&r2=1.29.2.2	Patch
6	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.c?r1=1.14.2.2&r2=1.14.2.3	Vendor Advisory
7	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.h?r1=1.3&r2=1.3.2.1	Vendor Advisory
8	http://secunia.com/advisories/43234	Vendor Advisory
9	http://secunia.com/advisories/43635	Vendor Advisory
10	http://secunia.com/advisories/43978
11	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.485806
12	http://www.debian.org/security/2011/dsa-2185
13	http://www.exploit-db.com/exploits/16129/	Exploit
14	http://www.securityfocus.com/bid/46183	Exploit
15	http://www.vupen.com/english/advisories/2011/0617	Vendor Advisory
16	http://www.vupen.com/english/advisories/2011/0857
17	https://bugzilla.redhat.com/show_bug.cgi?id=681718	Exploit Patch
18	http://bugs.proftpd.org/show_bug.cgi?id=3586	Patch
19	https://bugzilla.redhat.com/show_bug.cgi?id=681718	Exploit Patch
20	http://www.vupen.com/english/advisories/2011/0857
21	http://www.vupen.com/english/advisories/2011/0617	Vendor Advisory
22	http://www.securityfocus.com/bid/46183	Exploit
23	http://www.exploit-db.com/exploits/16129/	Exploit
24	http://www.debian.org/security/2011/dsa-2185
25	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.485806
26	http://secunia.com/advisories/43978
27	http://secunia.com/advisories/43635	Vendor Advisory
28	http://secunia.com/advisories/43234	Vendor Advisory
29	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.h?r1=1.3&r2=1.3.2.1	Vendor Advisory
30	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.c?r1=1.14.2.2&r2=1.14.2.3	Vendor Advisory
31	http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/mod_sftp.c?r1=1.29.2.1&r2=1.29.2.2	Patch
32	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058356.html
33	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058344.html
34	http://bugs.proftpd.org/show_bug.cgi?id=3587

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

JVN Vulnerability Information

ProFTPD の mod_sftp モジュールにおける整数オーバーフローの脆弱性

Title	ProFTPD の mod_sftp モジュールにおける整数オーバーフローの脆弱性
Summary	ProFTPD の mod_sftp モジュールには、整数オーバーフローの脆弱性が存在します。
Possible impacts	第三者により、不正な形式の SSH メッセージを介して、サービス運用妨害 (OOM kill を誘発するメモリー消費) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 24, 2011, midnight
Registration Date	April 27, 2011, 11:59 a.m.
Last Update	April 27, 2011, 11:59 a.m.

Affected System

ProFTPD Project

ProFTPD 1.3.3d およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1137	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1137
National Vulnerability Database (NVD)
2	CVE-2011-1137	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1137

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
ProFTPD Bugzilla
1	3586	http://bugs.proftpd.org/show_bug.cgi?id=3586
Proftpd Release Notes
2	RELEASE_NOTES-1.3.3e	http://www.proftpd.org/docs/RELEASE_NOTES-1.3.3e
3	RELEASE_NOTES-1.3.4rc2	http://www.proftpd.org/docs/RELEASE_NOTES-1.3.4rc2

その他

No	Name	URL
Secunia Advisory
1	SA43234	http://secunia.com/advisories/43234
SecurityFocus
2	46183	http://www.securityfocus.com/bid/46183

Change Log

No	Changed Details	Date of change
0	[2011年04月27日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:proftpd:proftpd:1.2.0:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:b::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.1:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:a::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.1:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.3:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.0:a::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:pre10::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:d::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:c::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.1:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.8:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.3:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.10:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.1:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.1:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc5::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:a::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.4:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.5:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:e::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.2:c::::::
cpe:2.3:a:proftpd:proftpd:1.2.7:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.7:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.8:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:pre9::::::
cpe:2.3:a:proftpd:proftpd:1.2.2:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.0:rc3::::::
cpe:2.3:a:proftpd:proftpd::d::::::*		1.3.3
cpe:2.3:a:proftpd:proftpd:1.3.2:b::::::
cpe:2.3:a:proftpd:proftpd:1.2.6:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.2:rc4::::::
cpe:2.3:a:proftpd:proftpd:1.2.5:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.10:rc3::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.2:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.8:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc2::::::
cpe:2.3:a:proftpd:proftpd:1.2.6:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.2.9:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.3:::::::*
cpe:2.3:a:proftpd:proftpd:1.2.6:::::::*
cpe:2.3:a:proftpd:proftpd:1.3.3:rc1::::::
cpe:2.3:a:proftpd:proftpd:1.3.0:rc3::::::