From owner-freebsd-security  Tue May 22 19:39:56 2001
Delivered-To: freebsd-security@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-9.dsl.lsan03.pacbell.net [63.207.60.9])
	by hub.freebsd.org (Postfix) with ESMTP id 8535037B42C
	for <freebsd-security@FreeBSD.ORG>; Tue, 22 May 2001 19:39:53 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id EFF1066B5F; Tue, 22 May 2001 19:39:52 -0700 (PDT)
Date: Tue, 22 May 2001 19:39:52 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Alex <alex@nixfreak.org>
Cc: Ryan <ryanpek@swbell.net>, freebsd-security@FreeBSD.ORG
Subject: Re: Is there a ftp vuln in 4.3-STABLE
Message-ID: <20010522193952.A33978@xor.obsecurity.org>
References: <000501c0e316$7deb4450$45d8db40@mhx800> <Pine.BSF.4.32.0105222026040.1300-100000@magnetar.blackhatnetworks.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="qDbXVdCdHGoSgWSk"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <Pine.BSF.4.32.0105222026040.1300-100000@magnetar.blackhatnetworks.com>; from alex@nixfreak.org on Tue, May 22, 2001 at 08:26:29PM -0400
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, May 22, 2001 at 08:26:29PM -0400, Alex wrote:
> Is this a FreeBSD specific FTP vulnerability?
>=20
> -Alex
>=20
> On Tue, 22 May 2001, Ryan wrote:
>=20
> > There is an ftp vuln... I do not have any details on it sorry.. Some ki=
nda
> > overflow.. I would run proftpd

No-one has informed the security-officer about any new vulnerability
in FreeBSD (or for that matter, about third party ftpd ports).  It's
probably worthwhile not flying into a panic until someone actually
provides some corroborating evidence.

Kris

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7CyL4Wry0BWjoQKURAiAgAKCE1oLTSoaKtmVwOfse9YWwyvNCgQCguq/M
kAFt1gdditzpLi1fS5m44KQ=
=T13+
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message