Full Disclosure mailing list archives

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability

From: "KJK::Hyperion" <hackbunny () s0ftpj org>
Date: Wed, 28 Nov 2007 13:16:34 +0100

Tonnerre Lombard ha scritto:

Microsoft FTP Client Multiple Bufferoverflow
Vulnerability

Isn't the FTP client compiled with stack overflow protection?

If so, how is that supposed to help?


By terminating the program before the payload is executed

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Microsoft FTP Client Multiple Bufferoverflow Vulnerability Rajesh Sethumadhavan (Nov 27)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 29)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 28)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability dev code (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Stan Bubrouski (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Peter Dawson (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)