The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a 0 character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proftpd | Proftpd | * | 1.3.2 (including) |
| Proftpd | Proftpd | 1.3.1 (including) | 1.3.1 (including) |
| Proftpd | Proftpd | 1.3.2 (including) | 1.3.2 (including) |
| Proftpd | Proftpd | 1.3.2-rc1 (including) | 1.3.2-rc1 (including) |
| Proftpd | Proftpd | 1.3.2-rc2 (including) | 1.3.2-rc2 (including) |
| Proftpd | Proftpd | 1.3.2-rc4 (including) | 1.3.2-rc4 (including) |
| Proftpd | Proftpd | 1.3.3-rc1 (including) | 1.3.3-rc1 (including) |
| Proftpd-dfsg | Ubuntu | hardy | * |
| Proftpd-dfsg | Ubuntu | intrepid | * |
| Proftpd-dfsg | Ubuntu | jaunty | * |
| Proftpd-dfsg | Ubuntu | karmic | * |
| Proftpd-dfsg | Ubuntu | upstream | * |