Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

atftp: buffer overflow

Package(s):

atftp

CVE #(s):

CAN-2003-0380

Created:

June 9, 2003

Updated:

June 12, 2003

Description:

Rick Patel discovered that atftpd is vulnerable to a buffer overflow when a long filename is sent to the server. An attacker could exploit this bug remotely to execute arbitrary code on the server. Read the full advisory for more information.

Alerts:

Debian	DSA-314-1	2003-06-11
Gentoo	200306-03	2003-06-08

(Log in to post comments)