Full Disclosure mailing list archives

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability

From: Valdis.Kletnieks () vt edu
Date: Wed, 28 Nov 2007 12:27:14 -0500

On Wed, 28 Nov 2007 12:05:24 +0100, "KJK::Hyperion" said:

Rajesh Sethumadhavan ha scritto:

Microsoft FTP Client Multiple Bufferoverflow
Vulnerability


Isn't the FTP client compiled with stack overflow protection?


Not all buffers live on the stack.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Microsoft FTP Client Multiple Bufferoverflow Vulnerability Rajesh Sethumadhavan (Nov 27)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 29)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 28)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
  - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability dev code (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Stan Bubrouski (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Peter Dawson (Nov 28)
    - Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)