Subject: Re: wu-ftpd has a security hole
To: David Brownlee <abs@netbsd.org>
From: Rick Kelly <rmk@toad.rmkhome.com>
List: netbsd-users
Date: 11/30/2001 12:29:11
David Brownlee said:
> wu-ftpd-2.6.1nb1 committed to pkgsrc - contains the globfix,
> and verified to remove the vulnerability on a RedHat 5.0 system
> (All of my NetBSD boxes run the NetBSD ftpd)
What I did was apply all three patches that they had.
ftpglob.patch
missing_format_strings.patch
nlst-shows-dirs.patch
--
Rick Kelly rmk@rmkhome.com www.rmkhome.com