proFTPd security bug

[seanatw]

Hi again,

it appears to me that the information you posted is for bug http://bugs.proftpd.org/show_bug.cgi?id=3521

whereas the information I posted is for bug
http://bugs.proftpd.org/show_bug.cgi?id=3519

The confusion probably came from the plesk patch which fixes both bugs. The bug 3519 apparently effects at least 1.2.0 to 1.3.3b. We are using the debian stable version 1.3.1 as you guessed.

The list of affected versions i found is toward the bottom of this page http://web.nvd.nist.gov/view/vuln/detail...-2010-3867

If this is not applicable to us I would love to call up the data centre and tell them to reverse the changes, otherwise do I have to compile proftpd 1.3.3c?

Thanks very much for your time,
Sean.