thedark
Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
 Posted: Thu Aug 04, 2005 12:13 am Post subject: Directory Transversal Buffer Overflow |
 |
|
Two problems have been found in the wget package as distributed in
Debian GNU/Linux:
* Stefano Zacchiroli found a buffer overrun in the url_filename function,
which would make wget segfault on very long URLs
* Steven M. Christey discovered that wget did not verify the FTP server
response to a NLST command: it must not contain any directory information,
since that can be used to make a FTP client overwrite arbitrary files.
Both problems have been fixed in version 1.5.3-3.1 for Debian GNU/Linux
2.2/potato and version 1.8.1-6.1 for Debian GNU/Linux 3.0/woody. |
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
