From owner-freebsd-questions@FreeBSD.ORG Thu Jul 31 15:52:55 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E99D737B401 for ; Thu, 31 Jul 2003 15:52:55 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-63-207-60-135.dsl.lsan03.pacbell.net [63.207.60.135]) by mx1.FreeBSD.org (Postfix) with ESMTP id 36C9143F85 for ; Thu, 31 Jul 2003 15:52:55 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id DB2DC66BE5; Thu, 31 Jul 2003 15:52:54 -0700 (PDT) Received: by rot13.obsecurity.org (Postfix, from userid 1000) id E33FE66C; Thu, 31 Jul 2003 15:52:54 -0700 (PDT) Date: Thu, 31 Jul 2003 15:52:54 -0700 From: Kris Kennaway To: Lucas Holt Message-ID: <20030731225254.GB15353@rot13.obsecurity.org> References: <6041B5F2-C383-11D7-A62F-0030656DD690@foolishgames.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="gj572EiMnwbLXET9" Content-Disposition: inline In-Reply-To: <6041B5F2-C383-11D7-A62F-0030656DD690@foolishgames.com> User-Agent: Mutt/1.4.1i cc: freebsd-questions@freebsd.org Subject: Re: WU FTPD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Jul 2003 22:52:56 -0000 --gj572EiMnwbLXET9 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jul 31, 2003 at 02:18:25PM -0400, Lucas Holt wrote: > There was a vulnerability released today in wu ftpd and I'm unclear if=20 > this would affect the software running on a freebsd system. It appears= =20 > to cause problems on linux 2.4.x kernels but not older kernels due to=20 > the way the compiler works. Does anyone know if this problem is=20 > exploitable on freebsd? If not, where should I ask this question? Read security@ or just update your ports collection and recompile wuftpd. Kris --gj572EiMnwbLXET9 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/KZ3GWry0BWjoQKURAjL1AJ4oCgGL+xxCKGMmffB740mqWRJLdACg/RPv 7oZHQvUwf8tjVoCU9DInmmo= =KAoO -----END PGP SIGNATURE----- --gj572EiMnwbLXET9--