CVE:CVE-2020-9273
CNNVD:CNNVD-202002-1021
ProFTPD是ProFTPD团队的一套安全云打印解决方案。该方案支持从笔记本电脑、台式机和移动设备连接打印机进行打印。
ProFTPD 1.3.7版本中的pool.c文件的‘alloc_pool’函数存在资源管理错误漏洞。远程攻击者可借助数据传输通道利用该漏洞破坏内存池并在系统上执行任意代码。
solution:Upgrade proftpd proftpd to a higher version than 1.3.7,and avoid the version 1.3.7; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse backports_sle to a higher version than 15.0,15.0:sp1,and avoid the version 15.0,15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade siemens simatic_net_cp_1545-1_firmware to a higher version than -; Upgrade siemens simatic_net_cp_1543-1_firmware to a higher version than 3.0,and avoid the version (,3.0)