In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql.
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "proftpd-basic", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-basic-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-dev", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-doc", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite", "binary_version": "1.3.6c-2ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite-dbgsym", "binary_version": "1.3.6c-2ubuntu0.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "proftpd-basic", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-core", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-core-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-dev", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-doc", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-crypto", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-crypto-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-wrap", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-wrap-dbgsym", "binary_version": "1.3.7c+dfsg-1ubuntu0.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "proftpd-core", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-core-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-dev", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-doc", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-crypto", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-crypto-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-geoip", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-geoip-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-ldap", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-ldap-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-mysql", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-mysql-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-odbc", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-odbc-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-pgsql", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-pgsql-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-snmp", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-snmp-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-sqlite", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-sqlite-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-wrap", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" }, { "binary_name": "proftpd-mod-wrap-dbgsym", "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "proftpd-core", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-core-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-dev", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-doc", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-crypto", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-crypto-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-geoip-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-ldap-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-mysql-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-odbc-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-pgsql-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-snmp-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-sqlite-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-wrap", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" }, { "binary_name": "proftpd-mod-wrap-dbgsym", "binary_version": "1.3.8.b+dfsg-1ubuntu0.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "proftpd-core", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-core-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-dev", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-doc", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-crypto", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-crypto-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-geoip", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-geoip-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-ldap", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-ldap-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-mysql", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-mysql-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-odbc", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-odbc-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-pgsql", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-pgsql-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-snmp", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-snmp-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-sqlite", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-sqlite-dbgsym", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-wrap", "binary_version": "1.3.8.c+dfsg-2" }, { "binary_name": "proftpd-mod-wrap-dbgsym", "binary_version": "1.3.8.c+dfsg-2" } ] }