wuftp 2.6

[swaraj <swaraj19@xxxxxxxxx>]

hi

any one running wuftp 2.6
the respective vendor vulnerable os are
redhat 6.1 6.2 (as usual) including Zope
slackware 7.0
suse 6.3
mandrake 7.0
caldera
and the fun is debian is not hehe coz it runs openbsd ftp :)
the best fix would be remove yur wuftp and compile the openbsd ftp its
neat and secure
the exploit is a buffer overflow and will give remote root so it is very
serious
the immediate fix is remove anonymous login
the attacker can  get root if the box accepts anonymous thats scary !


swaraj

debian rulezzzzzzz  :)



---
Visit our home page at: www.chennailug.org
Send e-mail to 'ilugc-request@xxxxxxxxxxxxxxxxxx' with 'unsubscribe' 
in either the subject or the body to unsubscribe from this list.