PDA

Bekijk Volledige Versie : Latest wu-ftpd exploit :-s



Mark Heiligen
13/02/06, 21:45
http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php

Marco Monicelli
14/02/06, 19:00
This exploit is NOT new at all because it has been known since 3 years now.

Regards

Marco aka Yog-Sotho






Mark Heiligen
<mark.heiligen@gm
x.at> To
bugtraq@securityfocus.com,
13/02/2006 09.41 full-disclosure@lists.grok.org.uk
cc

Subject
Latest wu-ftpd exploit :-s










http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php

Ragnar Paulson
15/02/06, 20:00
----- Original Message -----=20
From: "Mark Heiligen" <mark.heiligen@gmx.at>
To: <bugtraq@securityfocus.com>; <full-disclosure@lists.grok.org.uk>
Sent: Monday, February 13, 2006 3:41 AM
Subject: Latest wu-ftpd exploit :-s


> http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php
>=20

Isn't this a three year old exploit? Is this news? CVE-2003-0466.

Upgrades for wu-ftpd have been available from the various vendors for =
just as long.

FWIW, I compiled and ran this against an old wu-ftpd server here and =
found it was not exploitable.

Ragnar Paulson
The Software Group Limited