Re: tlug: FTP client buffer overflow [SECURITY]

[Scott Stone <sstone@example.com>]

On Thu, 17 Dec 1998, Chris Sekiya wrote:

> On Thu, 17 Dec 1998, Scott Stone wrote:
> 
> > Someone, I believe it was Christian Gafton at Redhat, found a buffer
> > overflow in the standard FTP client.
> 
> Unless I'm greatly mistaken, this would only be a security risk if the ftp
> client in question is suid root (does _anyone_ do that?).  Otherwise it's
> only an annoying bug.

Never underestimate the bounds of human stupidity - better safe than
sorry, I guess.

--------------------------------------------------
Scott M. Stone <sstone@example.com, sstone@example.com>
Head of TurboLinux Development/Systems Administrator
Pacific HiTech, Inc (USA) / Pacific HiTech, KK (Japan)


------------------------------------------------------------------
Next Nomikai: 15 January 1999, 19:30 Tengu TokyoEkiMae 03-3275-3691
Next Technical Meeting: 13 February, 12:30               Place: TBD
------------------------------------------------------------------
more info: http://tlug.linux.or.jp                     Sponsor: PHT