[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability

To: "KJK::Hyperion" <hackbunny@xxxxxxxxxx>
Subject: Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
From: Valdis.Kletnieks@xxxxxx
Date: Wed, 28 Nov 2007 12:27:14 -0500

On Wed, 28 Nov 2007 12:05:24 +0100, "KJK::Hyperion" said:
> Rajesh Sethumadhavan ha scritto:
> > Microsoft FTP Client Multiple Bufferoverflow
> > Vulnerability
> 
> Isn't the FTP client compiled with stack overflow protection?

Not all buffers live on the stack.

Attachment: pgpMw0Zzgg3ob.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  - From: Rajesh Sethumadhavan
- Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  - From: KJK::Hyperion

Prev by Date: [Full-disclosure] Secunia Research: Symantec Backup Exec Job Engine Denial of Service
Next by Date: [Full-disclosure] [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs
Previous by thread: Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
Next by thread: Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
Index(es):
- Date
- Thread