vsftpd is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user- supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of- service conditions. vsftpd 2.3.4 is affected other versions may also be vulnerable.

• http://dividead.wordpress.com/tag/heap-overflow/
• http://vsftpd.beasts.org/
• http://www.securityfocus.com/bid/51013

---

Updated on 2015-03-25