In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-basic" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-basic-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-dev" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-doc" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-geoip" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-geoip-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-ldap" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-ldap-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-mysql" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-mysql-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-odbc" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-odbc-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-pgsql" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-pgsql-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-snmp" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-snmp-dbgsym" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-sqlite" }, { "binary_version": "1.3.6c-2ubuntu0.1", "binary_name": "proftpd-mod-sqlite-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-basic" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-core" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-core-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-dev" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-doc" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-crypto" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-crypto-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-geoip" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-geoip-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-ldap" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-ldap-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-mysql" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-mysql-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-odbc" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-odbc-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-pgsql" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-pgsql-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-snmp" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-snmp-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-sqlite" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-sqlite-dbgsym" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-wrap" }, { "binary_version": "1.3.7c+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-wrap-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-core" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-core-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-dev" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-doc" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-crypto" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-crypto-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-geoip" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-geoip-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-ldap" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-ldap-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-mysql" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-mysql-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-odbc" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-odbc-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-pgsql" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-pgsql-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-snmp" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-snmp-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-sqlite" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-sqlite-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-wrap" }, { "binary_version": "1.3.8.b+dfsg-2ubuntu1.24.10.1", "binary_name": "proftpd-mod-wrap-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-core" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-core-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-dev" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-doc" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-crypto" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-crypto-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-geoip" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-geoip-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-ldap" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-ldap-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-mysql" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-mysql-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-odbc" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-odbc-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-pgsql" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-pgsql-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-snmp" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-snmp-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-sqlite" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-sqlite-dbgsym" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-wrap" }, { "binary_version": "1.3.8.b+dfsg-1ubuntu0.1", "binary_name": "proftpd-mod-wrap-dbgsym" } ] }