Date: Fri, 11 Mar 2016 22:22:40 +0100 From: Moritz Mühlenhoff <jmm@...til.org> To: oss-security@...ts.openwall.com Cc: cve-assign@...re.org Subject: Re: Several out of bounds reads in ProFTPD On Fri, Mar 11, 2016 at 05:25:15PM +0100, Hanno Böck wrote: > https://blog.fuzzing-project.org/40-Several-out-of-bounds-reads-in-ProFTPD.html > > The latest releases of ProFTPD 1.3.5a and 1.3.6rc2 fix several out of > bounds read issues. I discovered these issues by running the test suite > with Address Sanitizer enabled. Can you elaborate on the impact? Do any of these allow a user to crash the ftpd or can the user merely terminate her own FTP session? Cheers, Moritz
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.