Re: wuftpd 2.6.1 -- example of bad coding

[Gregory A Lundberg <lundberg () VR NET>]

> There are two non-exploitable format string bugs in wuftpd 2.6.1.
                ^^^^^^^^^^^^^^^

There are also two you didn't see.

If you're bothered to ask we'd have pointed you to

ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_st
rings.patch

Where you'll find we fixed all four of them on July 7, 2000.