{"id":"MGASA-2021-0434","aliases":[],"status":"published","title":"Updated proftpd packages fix security vulnerability","description":"Fixes memory disclosure to RADIUS servers by mod_radius.\n\nFtp clients like filezilla fail to detect locale with in log :\n\"Status: Server does not support non-ASCII characters.\"\n\nThis comes from proftpd MultilineRFC2228 directive enabled by default.\n\nWithout this directive  Filezilla is able to enable utf8 options\ncorrectly.\n\nFixed by disabling MultilineRFC2228 directive.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-09-23T04:49:29Z","modified":"2026-04-16T04:24:34Z","fixes":[{"ecosystem":"Mageia:8","package":"proftpd","fixed_in":["1.3.7a-3.1.mga8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7a-3.1.mga8"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2021-0434.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29449","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/K3JL66LCDUIASS4TM7SY6R2D7W2WBXUE/","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001690","tags":["report"]},{"url":"https://github.com/proftpd/proftpd/issues/1085","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2021-0434","title":"Updated proftpd packages fix security vulnerability","description":"Fixes memory disclosure to RADIUS servers by mod_radius.\n\nFtp clients like filezilla fail to detect locale with in log :\n\"Status: Server does not support non-ASCII characters.\"\n\nThis comes from proftpd MultilineRFC2228 directive enabled by default.\n\nWithout this directive  Filezilla is able to enable utf8 options\ncorrectly.\n\nFixed by disabling MultilineRFC2228 directive.\n","status":"published","published":"2021-09-23T04:49:29Z","modified":"2026-04-16T04:24:34.122613Z","updated_at":"2026-11-02T15:49:41.849028Z"}]}}