Proftpd 1.3.3c backdoor issue

[zeroday]

Please check ....

http://sourceforge.net/mailarchive/[email protected]

1.3.3.c has been compromised and most likely the version on plesk is affected as well.

 

[lhwparis]

Dont think so. read the text "...On Sunday, the 28th of November 2010 around 20:00 UTC the main
distribution server of the ProFTPD project was compromised..."

So only versions downloaded between 28th November and yesterday were affected. The Proftp version 1.3.3c was downloaded and integrated into plesk earlier because 1.3.3c Plesk hotfix was released on 11th November.