LWN.net Logo

gftp: buffer overflows

Package(s):gftp CVE #(s):CVE-2007-3962 CVE-2007-3961
Created:November 2, 2007 Updated:January 22, 2008
Description: Kalle Olavi Niemitalo discovered two boundary errors in fsplib code included in gFTP when processing overly long directory or file names. A remote attacker could trigger these vulnerabilities by enticing a user to download a file with a specially crafted directory or file name, possibly resulting in the execution of arbitrary code (CVE-2007-3962) or a Denial of Service (CVE-2007-3961).
Alerts:
Mandriva MDVSA-2008:018 2007-01-21
Gentoo 200711-01 2007-11-01

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds