VDB

GCVE-110-MAGEIA-2016-128

GCVE-110-MAGEIA-2016-128
Advisory Published
Vulnetix · Advisory published March 31, 2016
A bug with security implications was found in the mod_tls module in ProFTPD before 1.3.5b. This module has a configuration option TLSDHParamFile to specify user-defined Diffie Hellman parameters. The software would ignore the user-defined parameters and use Diffie Hellman key exchanges with 1024 bits (CVE-2016-3125). The proftpd package has been updated to version 1.3.5b, which fixes this issue and other bugs, including: - SSH RSA hostkeys smaller than 2048 bits now work properly. - MLSD response lines are now properly CRLF terminated.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaproftpd1.3.5b-1.mga5 (unaffected), 0 (affected), 0 (affected), * (unaffected)—
Mageiazlib0 (affected), 1.2.8-7.1.mga5 (unaffected)—

Aliases

CVE-2016-3125

References

Updated proftpd packages fix security vulnerability
advisory
Updated proftpd packages fix security vulnerability
issue
Updated proftpd packages fix security vulnerability
issue
Updated proftpd packages fix security vulnerability
issue
Fixed zlib where the code relies on undefined behavior in the C standard
advisory
Fixed zlib where the code relies on undefined behavior in the C standard
issue
Fixed zlib where the code relies on undefined behavior in the C standard
issue

Browse GCVE Records

74,108 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›