Full Disclosure mailing list archives

Re: glibc and alloca()

From: Maksymilian Arciemowicz <cxib () securityreason com>
Date: Fri, 25 Feb 2011 08:22:59 +0000 (UTC)

Chris Evans <scarybeasts <at> gmail.com> writes:

Linux distribution might still have vulnerabilities in this area.


proftpd use gnu libc implementation

http://www.proftpd.org/docs/RELEASE_NOTES-1.3.4rc1
  + Updated fnmatch implementation, using glibc-2.9 version.

Version 1.3.3d may contain this issue

-- 
Best Regards
pub   4096R/D6E5B530 2010-09-19
uid                  Maksymilian Arciemowicz (cx) <max () cxib net>
sub   4096R/58BA663C 2010-09-19


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

glibc and alloca() Chris Evans (Feb 24)
- Re: glibc and alloca() Maksymilian Arciemowicz (Feb 25)
  - Re: glibc and alloca() Graham Gower (Feb 25)