> There are two non-exploitable format string bugs in wuftpd 2.6.1.
^^^^^^^^^^^^^^^
There are also two you didn't see.
If you're bothered to ask we'd have pointed you to
ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_st
rings.patch
Where you'll find we fixed all four of them on July 7, 2000.
- wuftpd 2.6.1 -- example of bad coding Przemyslaw Frasunek
- Re: wuftpd 2.6.1 -- example of bad coding Gregory A Lundberg
- Re: wuftpd 2.6.1 -- example of bad coding Iv�n Arce
