Wu-ftpd FTP server contains remotely exploitable off-by-one bug

[polytarp at cyberspace.org]

On Thu, 31 Jul 2003 jjf at mind.net wrote:

> Hello,
> 
> I see in BugTraq that there's yet another problem with Wu-ftpd, but I see
> no mention of it in the freebsd-security mailing list archives...I have
> searched the indexes from all of June and July.
> 
> Wu is pretty widely used, so I'm surprised that nobody seems to have 
> mentioned this problem in this forum.
> 
> The notice on BugTraq mentioned only Linux, not FreeBSD, but that's no
> reason to assume that FreeBSD machines aren't vulnerable, too.  Which is
> why I am confused as to the lack of discussion of this matter.
> 
> Can anyone shed some light on this?
> 
> Thank you,
> 
> John
> -- 
> +---------------------------------------------------------------------------+
> | John Fox <jjf at mind.net>     |    System Administrator   | InfoStructure   |
> +---------------------------------------------------------------------------+
> |  "The people and friends that we have lost, the dreams that have faded... |
> |  never forget them."  -- Yuna, Final Fantasy X                            |
> +---------------------------------------------------------------------------+
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"
> 


Buffer overflows which work on Linux do not work on FreeBSD.