{ "document" : { "aggregate_severity" : { "text" : "mittel" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "ProFTPD ist ein Open Source FTP-Server.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein authentisierter Angreifer kann eine Schwachstelle in ProFTPD ausnutzen, um einen Denial of Service zu verursachen.", "title" : "Angriff" }, { "category" : "general", "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2025-0295 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0295.json" }, { "category" : "self", "summary" : "WID-SEC-2025-0295 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0295" }, { "category" : "external", "summary" : "NIST Vulnerability Database vom 2025-02-06", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-57392" }, { "category" : "external", "summary" : "GitHub Br1m4zz vom 2025-02-06", "url" : "https://github.com/Br1m4zz/protocol_vul_repoduce" }, { "category" : "external", "summary" : "ProFTPd GitHub vom 2025-02-09", "url" : "https://github.com/proftpd/proftpd/issues/1866" }, { "category" : "external", "summary" : "Fedora Security Advisory FEDORA-EPEL-2025-0C6EB808FC vom 2025-02-13", "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-0c6eb808fc" }, { "category" : "external", "summary" : "Fedora Security Advisory FEDORA-2025-D37AD923F5 vom 2025-02-13", "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-2025-d37ad923f5" }, { "category" : "external", "summary" : "Fedora Security Advisory FEDORA-2025-835949B994 vom 2025-02-13", "url" : "https://bodhi.fedoraproject.org/updates/FEDORA-2025-835949b994" }, { "category" : "external", "summary" : "openSUSE Security Update OPENSUSE-SU-2025:14827-1 vom 2025-02-21", "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C3HZA5IS6YXHXDULEZHLHWOVCC3IYNGP/" }, { "category" : "external", "summary" : "Debian Security Advisory DLA-4077 vom 2025-03-02", "url" : "https://lists.debian.org/debian-lts-announce/2025/03/msg00003.html" }, { "category" : "external", "summary" : "SUSE Security Update SUSE-SU-2025:1028-1 vom 2025-03-26", "url" : "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020611.html" }, { "category" : "external", "summary" : "openSUSE Security Update OPENSUSE-SU-2025:0315-1 vom 2025-08-25", "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AK7Q2WHCGKXLADMF5L247PYG4ZKK4Y25/" }, { "category" : "external", "summary" : "Meinberg Security Advisory MBGSA-2025.02 vom 2025-11-27", "url" : "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-02-lantime-firmware-v7-08-021.htm" } ], "source_lang" : "en-US", "title" : "ProFTPD: Schwachstelle ermöglicht Denial of Service", "tracking" : { "current_release_date" : "2025-11-27T23:00:00.000+00:00", "generator" : { "date" : "2025-11-28T06:42:46.745+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.5.0" } }, "id" : "WID-SEC-W-2025-0295", "initial_release_date" : "2025-02-06T23:00:00.000+00:00", "revision_history" : [ { "date" : "2025-02-06T23:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" }, { "date" : "2025-02-09T23:00:00.000+00:00", "number" : "2", "summary" : "Anpassung aufgrund neuer Informationen" }, { "date" : "2025-02-13T23:00:00.000+00:00", "number" : "3", "summary" : "Neue Updates von Fedora aufgenommen" }, { "date" : "2025-02-23T23:00:00.000+00:00", "number" : "4", "summary" : "Neue Updates von openSUSE aufgenommen" }, { "date" : "2025-03-02T23:00:00.000+00:00", "number" : "5", "summary" : "Neue Updates von Debian aufgenommen" }, { "date" : "2025-03-26T23:00:00.000+00:00", "number" : "6", "summary" : "Neue Updates von SUSE aufgenommen" }, { "date" : "2025-08-25T22:00:00.000+00:00", "number" : "7", "summary" : "Neue Updates von openSUSE aufgenommen" }, { "date" : "2025-11-27T23:00:00.000+00:00", "number" : "8", "summary" : "Neue Updates von Meinberg aufgenommen" } ], "status" : "final", "version" : "8" } }, "product_tree" : { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Debian Linux", "product" : { "name" : "Debian Linux", "product_id" : "2951", "product_identification_helper" : { "cpe" : "cpe:/o:debian:debian_linux:-" } } } ], "category" : "vendor", "name" : "Debian" }, { "branches" : [ { "category" : "product_name", "name" : "Fedora Linux", "product" : { "name" : "Fedora Linux", "product_id" : "74185", "product_identification_helper" : { "cpe" : "cpe:/o:fedoraproject:fedora:-" } } } ], "category" : "vendor", "name" : "Fedora" }, { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "<7.08.021", "product" : { "name" : "Meinberg LANTIME <7.08.021", "product_id" : "T048942" } }, { "category" : "product_version", "name" : "7.08.021", "product" : { "name" : "Meinberg LANTIME 7.08.021", "product_id" : "T048942-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:meinberg:lantime:7.08.021" } } } ], "category" : "product_name", "name" : "LANTIME" } ], "category" : "vendor", "name" : "Meinberg" }, { "branches" : [ { "category" : "product_name", "name" : "Open Source ProFTPD", "product" : { "name" : "Open Source ProFTPD", "product_id" : "T019077", "product_identification_helper" : { "cpe" : "cpe:/a:proftpd:proftpd:-" } } } ], "category" : "vendor", "name" : "Open Source" }, { "branches" : [ { "category" : "product_name", "name" : "SUSE Linux", "product" : { "name" : "SUSE Linux", "product_id" : "T002207", "product_identification_helper" : { "cpe" : "cpe:/o:suse:suse_linux:-" } } }, { "category" : "product_name", "name" : "SUSE openSUSE", "product" : { "name" : "SUSE openSUSE", "product_id" : "T027843", "product_identification_helper" : { "cpe" : "cpe:/o:suse:opensuse:-" } } } ], "category" : "vendor", "name" : "SUSE" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2024-57392", "product_status" : { "known_affected" : [ "2951", "T002207", "T027843", "T048942", "T019077", "74185" ] }, "release_date" : "2025-02-06T23:00:00.000+00:00", "title" : "CVE-2024-57392" } ] }