RE: ProFTPD-1.2.9rc2 remote root exploit

[amebix () comcast net]

I dont know about 'decrypting' it but from what I can tell yes it is launched locally. I doubt this is a legitimate 0 
day, it does look like evil code however. I would not run this on a system you cant rebuild.

> The shellcode seems to be locally launched. Anybody to "decrypt" the
> shellcode ?
chris
chris () cr-secure net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html