bugtraq - Re: ArGoSoft FTP server remote heap overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 01 Mar 2006 18:07:59 +0100
From: Jerome Athias <jerome.athias@...e.fr>
To: "Steven M. Christey" <coley@...re.org>
Cc: bugtraq@...urityfocus.com
Subject: Re: ArGoSoft FTP server remote heap overflow

Hi,

as i replied privately to you, yes i think we can say that. You could
consider it as an update...
Note that the vendor was contacted without response.

Regards
/JA

Steven M. Christey a écrit :
> A buffer overflow in DELE was originally reported to Bugtraq by CorryL
> in March 2005, for ArGoSoft FTP 1.4.2.8 (CVE-2005-0696):
>
>   http://www.securityfocus.com/archive/1/392653
>
> According to CorryL's disclosure timeline, no patch had been released
> by the disclosure date.
>
> So, is this a rediscovery of that older issue, for the most recent
> version?
>
> - Steve
>
>
>