full-disclosure - DreamFTP Server 1.02 Buffer Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040207054533.GB9557@nmt.edu>
From: houdini at nmt.edu (Bill Weiss)
Subject: DreamFTP Server 1.02 Buffer Overflow

badpack3t(badpack3t@...urity-protocols.com)@Sat, Feb 07, 2004 at 12:29:54AM -0500:
> SP Research Labs Advisory x09
> --------------------------------------------
> 
> DreamFTP 1.02 Buffer Overflow
> --------------------------------------------
> Example:
> ---------
> 
> User (192.168.1.101:(none)): %n%n%n
> Connection closed by remote host.
> 
> **Application Crashes**

So, that would be a format string vuln, not a buffer overflow, right?

-- 
Bill Weiss
 
I'm trying to develop responses to things that annoy me that don't
involve the phrases 'nuke the site from orbit', 'I dispatch
assassins', or the word 'smite'.  Not going so well so far.
        -- Claire Bickell