The vsftp daemon was not handling the "deny_file" option properly, allowing unauthorized access in some specific scenarios (CVE-2015-1419).
{ "section": "core" }