The data centre we use has disabled proftpd on our servers four days ago because of this bug. I had a look around and I see no mention of it on these forums so far.
This potentially allows root access (apparently). I was wondering if we are in fact are affected, and if so, is there a fix for this yet? I see Plesk (Parallels) have released their own fix at http://www.parallels.com/products/plesk/proftpd
Any information greatly appreciated thank you
reported by seanatw