It’s scary to think of things like this, but it happens all the time. Hackers (for the most part) try to keep exploits secret so that security companies can not make patches for them. This is just another example of one of these well-kept exploits from the public.

For over a year now, attackers could have used ProFTPD to plant and execute arbitrary code on the FTP servers that grant write privileges. The developers believe that other attack vectors are also possible and are delivering an updated version. The vulnerability was discovered by Evgeny Legerov, who has now released a public exploit module for the Metasploit framework in his commercial VulnDisco package. Legerov claims that the VulnDisco package has contained the exploit since the end of last year.[more]

Tags: Hackers