Re: MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability

[Jedi/Sector One <j () pureftpd org>]

On Fri, Sep 26, 2003 at 10:50:02PM -0000, Mandrake Linux Security Team wrote:
> The problematic code first appeared in ProFTPD 1.2.7rc1, and
>  the provided packages are all patched by the ProFTPD team to protect
>  against this vulnerability.

  Uh?
  
  The bug can at least be triggered on version 1.2.6 as well.

-- 
                       Let internet explore your host
                    http://www.pivx.com/larholm/unpatched/
                    

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html