Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Apr 2001 07:48:14 -0400 (EDT)
From:      Weldon S Godfrey 3 <weldon@excelsus.com>
To:        freebsd-questions@freebsd.org
Subject:   CERT Advisory CA-2001-07 (fwd)
Message-ID:  <Pine.BSF.4.21.0104100740200.2171-100000@joule.excelsus.com>

next in thread | raw e-mail | index | archive | help

The File Globbing Vulnerability mentioned in CERT Advisory CA-2001-07 is
fixed in 4.2-STABLE and 5.0-CURRENT and will be fixed on 4.3-RELEASE.

My question is, can the ftpd binary be used from 4.2-STABLE  for
4.2-RELEASE (or any 4.x-RELEASE) to fix this problem or is it that the   
binary cannot work under these versions or is the fix beyond the binary
(it involves shared libraries, etc.)?


Thanks,

Weldon

--SNIP from CERT CA-2001-07 --

   FreeBSD is vulnerable to the glob-related bugs. We have corrected
   these bugs in FreeBSD 5.0-CURRENT and FreeBSD 4.2-STABLE, and they
   will not be present in FreeBSD 4.3-RELEASE.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0104100740200.2171-100000>