Debrouxl

**Name of the Vulnerable Software and Affected Versions** ProFTPD versions prior to 1.3.7 **Description** An issue was discovered in the tls verify crl function, which prevents some valid Certificate Revocation Lists (CRLs) from being taken into account. This can allow clients whose certificates have been revoked to connect to the server. **Recommendations** For ProFTPD versions prior to 1.3.7, update to version 1.3.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ProFTPD versions prior to 1.3.6 **Description** An issue was discovered in the tls verify crl function, where a wrong iteration variable is used when checking a client certificate against Certificate Revocation List (CRL) entries. This can cause some CRL entries to be ignored, allowing clients with revoked certificates to connect to the server. **Recommendations** For versions prior to 1.3.6, update to version 1.3.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ProFTPD versions prior to 1.3.6 **Description** A crash can occur when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup due to a direct dereference of a NULL pointer. **Recommendations** For versions prior to 1.3.6, update to version 1.3.6 or later to resolve the issue.