lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <da88eddf-f466-4c88-834f-6f5a4f82016b@zmail15.collab.prod.int.phx2.redhat.com> Date: Thu, 15 Dec 2011 09:22:10 -0500 (EST) From: Ramon de C Valle <rcvalle@...hat.com> To: full-disclosure@...ts.grok.org.uk Subject: More on exploiting glibc __tzfile_read integer overflow to buffer overflow and vsftpd More on exploiting glibc __tzfile_read integer overflow to buffer overflow and vsftpd http://rcvalle.com/post/14261796328/more-on-exploiting-glibc-tzfile-read-integer-overflow -- Ramon de C Valle / Red Hat Security Response Team _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/