Bugtraq mailing list archives

Re: ncftp 2.4.2 MkDirs bug

From: felicity () KLUGE NET (Theo Van Dinter)
Date: Fri, 20 Mar 1998 13:42:59 -0500


On Thu, 19 Mar 1998, Michal Zalewski wrote:

| Bug:
| ncftp 2.4.2 has ability to automatic download of whole directories (get
[snip]
|
| Fix:
| replace system() call in Util.h with mkdir().

To note, there is a new version of NcFTP (2.4.3) released on March 19th which
fixes this bug.  It's available from ftp.ncftp.com under /pub/ncftp.

Current thread:

LinCity Buffer Overflow T. Freak (Mar 16)
- Re: LinCity Buffer Overflow Bob Tracy - TDS (Mar 16)
- BSD/OS 3.0 config_anonftp script trey (Mar 16)
  - bug in su (Slackware 3.4) Peter van Dijk (Mar 15)
    - Re: bug in su (Slackware 3.4) Martin Schulze (Mar 22)
    - Re: bug in su (Slackware 3.4) Martin Schulze (Mar 22)
  - Re: BSD/OS 3.0 config_anonftp script Bill Becker (Mar 18)
  - ncftp 2.4.2 MkDirs bug Michal Zalewski (Mar 19)
    - Re: ncftp 2.4.2 MkDirs bug Theo Van Dinter (Mar 20)
    - New FrontPage98 Server Extensions Release (fwd) Marc Slemko (Mar 20)
  - Ascend Kill Thomas Michaux (Mar 20)
- <Possible follow-ups>
- Re: Lincity Buffer Overflow bst () INAME COM (Mar 17)