From owner-freebsd-security@FreeBSD.ORG  Mon Feb  4 16:48:49 2013
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by hub.freebsd.org (Postfix) with ESMTP id EBFBFBEC;
 Mon,  4 Feb 2013 16:48:49 +0000 (UTC) (envelope-from fabian@wenks.ch)
Received: from batman.home4u.ch (batman.home4u.ch [62.12.173.2])
 by mx1.freebsd.org (Postfix) with ESMTP id 54D278D7;
 Mon,  4 Feb 2013 16:48:48 +0000 (UTC)
X-Virus-Scanned: amavisd-new at home4u.ch
Received: from flashback.wenks.ch (fabian@flashback.wenks.ch
 [IPv6:2001:8a8:1005:1:223:dfff:fedf:13c9]) (authenticated bits=0)
 by batman.home4u.ch (8.14.4/8.14.4) with ESMTP id r14GRGRv063066
 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO);
 Mon, 4 Feb 2013 17:27:16 +0100 (CET) (envelope-from fabian@wenks.ch)
Message-ID: <510FE164.6070502@wenks.ch>
Date: Mon, 04 Feb 2013 17:27:16 +0100
From: Fabian Wenk <fabian@wenks.ch>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6;
 rv:17.0) Gecko/20130107 Thunderbird/17.0.2
MIME-Version: 1.0
To: freebsd-security@freebsd.org, freebsd-hubs@freebsd.org
Subject: Full-Disclosure posting "FreeBSD 9.1 ftpd Remote Denial of Service"
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Feb 2013 16:48:50 -0000

Hello

A few days ago there was the posting "FreeBSD 9.1 ftpd Remote 
Denial of Service" [1] on the Full-Disclosure mailing list. Is 
this a known issue to the FreeBSD community?

   [1] 
http://lists.grok.org.uk/pipermail/full-disclosure/2013-February/089583.html

There are also many ftp.*.freebsd.org mirrors listed in the above 
mention posting, so I also put freebsd-hubs@ into the recipient 
list. This will probably help, that ftp mirror operators are 
alerted and can take any action if needed.


bye
Fabian