Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recvbin, (12) recvchunkstart, (13) send, (14) sendbin, (15) sendchunkstart, (16) appendchunkstart, (17) append, or (18) append_bin command.
{
"binaries": [
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-appmon"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-asn1"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-base"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-base-hipe"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-common-test"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-corba"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-crypto"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-debugger"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-dev"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-dialyzer"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-diameter"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-edoc"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-eldap"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-erl-docgen"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-et"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-eunit"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-examples"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-gs"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-ic"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-ic-java"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-inets"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-jinterface"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-manpages"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-megaco"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-mnesia"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-mode"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-nox"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-observer"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-odbc"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-os-mon"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-parsetools"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-percept"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-pman"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-public-key"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-reltool"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-runtime-tools"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-snmp"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-src"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-ssh"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-ssl"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-syntax-tools"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-test-server"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-toolbar"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-tools"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-tv"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-typer"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-webtool"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-x11"
},
{
"binary_version": "1:16.b.3-dfsg-1ubuntu2.2",
"binary_name": "erlang-xmerl"
}
],
"availability": "No subscription required"
}