Re: remotely exploitable vulnerability in lukemftpd / tnftpd

On Tue, Aug 17, 2004 at 05:14:16PM -0400, Chuck Swiger wrote:
> Jacques A. Vidrine wrote:
> [ ... ]
> >Even in FreeBSD 4.7, lukemftpd was installed but not enabled.
> >
> >More details will be available in a FreeBSD advisory to follow.
> 
> Hi, Jacques--
> 
> Is this related to NetBSD Security Advisory 2004-009, at: 
> ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-009.txt.asc?

Yes, same issue.

> More importantly, is FreeBSD's stock ftpd also affected, or just lukemftpd?

Just lukemftpd.  Przemyslaw's advisory has more details.
http://lists.netsys.com/pipermail/full-disclosure/2004-August/025418.html

Cheers,
-- 
Jacques Vidrine / nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"