• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

critical issue: Plesk 11.09-proftp Update to 1.3.5 or 1.3.4e possible?

GerdSchrewe

Basic Pleskian
Ubuntu 12.04, Plesk 11.09 mu63
proftp Version 1.3.4
Vadim Melihow reported a critical issue with proftpd installations that use the
mod_copy module's SITE CPFR/SITE CPTO commands; mod_copy allows these commands
to be used by *unauthenticated clients*:

How can i update proftp?
Will paralleles offer a fix?

Unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy
Reported: 2015-04-07 16:35 UTC by TJ Saunders
Modified: 2015-04-15 17:53 UTC (History)
http://bugs.proftpd.org/show_bug.cgi?id=4169


Thanx a lot for help!
 
Back
Top