Re: QNX RTP ftpd stack overflow

[Kris Kennaway]

On Fri, Feb 02, 2001 at 08:03:09PM +0100, Przemyslaw Frasunek wrote:

> BTW. Old BSD derived ftpd is also used in opieftpd and SSLftpd. Both are
>      vulnerable to this attack.

In case anyone is wondering how old is old:

----------------------------
revision 1.5
date: 1996/11/20 22:12:50;  author: pst;  state: Exp;  lines: +9 -5
Truncate argument list to avoid buffer overflows.

Cannidate for: 2.1 and 2.2
----------------------------

Kris

PGP signature