Create an account

Subscribe to LWN

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gftp: missing input sanitizing

Package(s):

gftp

CVE #(s):

CAN-2005-0372 CAN-2004-1376

Created:

February 17, 2005

Updated:

July 13, 2005

Description:

gftp has a directory traversal vulnerability. A remote server could use specially crafted filenames to overwrite local files.

Alerts:

Fedora-Legacy	FLSA:152908	2005-07-10
Red Hat	RHSA-2005:410-01	2005-06-13
Fedora	FEDORA-2005-310	2005-04-07
Fedora	FEDORA-2005-309	2005-04-07
Mandrake	MDKSA-2005:050	2005-03-04
Gentoo	200502-27	2005-02-19
SuSE	SUSE-SR:2005:005	2005-02-18
Debian	DSA-686-1	2005-02-17

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds