Bugtraq mailing list archives

Re: WuFTPD: Providing remote root since at least1994

From: pfaffben () MSU EDU (Ben Pfaff)
Date: Thu, 29 Jun 2000 12:09:00 -0400


Theo de Raadt <deraadt () CVS OPENBSD ORG> writes:

[...regarding snprintf()...]

b) Returns -1 and truncate with a \0


Can you please list the vendors who have the incorrect behaviours you
described in (a) and (b) so that we can properly bitch at them?


glibc before 2.1.x, for one.

Current thread:

Re: WuFTPD: Providing *remote* root since at least1994, (continued)
- - Re: WuFTPD: Providing *remote* root since at least1994 Henrik Nordstrom (Jun 27)
    - Re: WuFTPD: Providing *remote* root since at least1994 Theo de Raadt (Jun 28)
    - Re: WuFTPD: Providing *remote* root since at least1994 Valentin Nechayev (Jun 29)
    - Re: WuFTPD: Providing *remote* root since at least1994 Kenn Humborg (Jun 29)
    - Re: WuFTPD: Providing *remote* root since at least1994 Hudin Lucian (Jun 29)
    - Multiple vulnerabilities in Sybergen Secure Desktop anders.ingeborn () INFOSEC SE (Jun 30)
    - SecureXpert Advisory [SX-20000620-2] SecureXpert DIRECT Sender (Jun 30)
  - Re: WuFTPD: Providing *remote* root since at least1994 Bernd Luevelsmeyer (Jun 28)
- Re: WuFTPD: Providing *remote* root since at least1994 Lars Mathiesen (Jun 28)
- Re: WuFTPD: Providing *remote* root since at least1994 Robert Bihlmeyer (Jun 29)
- Re: WuFTPD: Providing *remote* root since at least1994 Ben Pfaff (Jun 29)
  - Update to Integrity Protection Driver Available IPD (Jun 29)
  - Re: WuFTPD: Providing *remote* root since at least1994 Theo de Raadt (Jun 29)
  - Buggy ARP handling in Windoze Paul Starzetz (Jun 29)
    - Re: Buggy ARP handling in Windoze Jurjen Oskam (Jun 29)
    - Re: Buggy ARP handling in Windoze Steven Alexander (Jun 29)
    - vpopmail-3.4.11 problems H D Moore (Jun 29)
    - CONECTIVA LINUX SECURITY ANNOUNCEMENT - dump Conectiva Security (Jun 30)