Re: *ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability

From: David Brownlee (absat_private)
Date: Thu Nov 29 2001 - 04:27:11 PST

  • Next message: secureat_private: "[CLA-2001:442] Conectiva Linux Security Announcement - wu-ftpd" 

    	Can confirm 'ls ~{' runs without problem by ftp on NetBSD
	1.5.2, 1.4.1, and 1.3.2 systems.

-- 
		David/absolute		absat_private


On Thu, 29 Nov 2001, Andre Oppermann wrote:

>
> The FreeBSD ftpd on at least FreeBSD 4.4 and FreeBSD 5.0-current does
> not crash but simply provides a normal 'ls' output even though script0r
> sees his Linux port of the (Open)BSD ftpd crashing.

    This archive was generated by hypermail 2b30 : Thu Nov 29 2001 - 11:02:33 PST