From owner-freebsd-security@FreeBSD.ORG  Thu Jul 31 11:35:52 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8972A37B414
	for <freebsd-security@freebsd.org>;
	Thu, 31 Jul 2003 11:35:52 -0700 (PDT)
Received: from morpheus.mind.net (morpheus.mind.net [69.9.130.12])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BE74B43F85
	for <freebsd-security@freebsd.org>;
	Thu, 31 Jul 2003 11:35:51 -0700 (PDT)
	(envelope-from jfox@morpheus.mind.net)
Received: from morpheus.mind.net (localhost [127.0.0.1])
	by morpheus.mind.net (8.12.6/8.12.6) with ESMTP id h6VIZs7m085618
	for <freebsd-security@freebsd.org>;
	Thu, 31 Jul 2003 11:35:54 -0700 (PDT)
	(envelope-from jfox@morpheus.mind.net)
Received: (from jfox@localhost)
	by morpheus.mind.net (8.12.6/8.12.6/Submit) id h6VIZrxd085617
	for freebsd-security@freebsd.org;
	Thu, 31 Jul 2003 11:35:53 -0700 (PDT)
Date: Thu, 31 Jul 2003 11:35:53 -0700
From: John Fox <jjf@mind.net>
To: freebsd-security@freebsd.org
Message-ID: <20030731183553.GA85469@mind.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
X-Quip: Fly the white flag of war!
Subject: Wu-ftpd FTP server contains remotely exploitable off-by-one bug
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Jul 2003 18:35:52 -0000

Hello,

I see in BugTraq that there's yet another problem with Wu-ftpd, but I see
no mention of it in the freebsd-security mailing list archives...I have
searched the indexes from all of June and July.

Wu is pretty widely used, so I'm surprised that nobody seems to have 
mentioned this problem in this forum.

The notice on BugTraq mentioned only Linux, not FreeBSD, but that's no
reason to assume that FreeBSD machines aren't vulnerable, too.  Which is
why I am confused as to the lack of discussion of this matter.

Can anyone shed some light on this?

Thank you,

John
-- 
+---------------------------------------------------------------------------+
| John Fox <jjf@mind.net>     |    System Administrator   | InfoStructure   |
+---------------------------------------------------------------------------+
|  "The people and friends that we have lost, the dreams that have faded... |
|  never forget them."  -- Yuna, Final Fantasy X                            |
+---------------------------------------------------------------------------+