| Summary: | Buffer Overflow in lukemftp | ||
|---|---|---|---|
| Product: | Base System | Reporter: | Ryoji Kanai <rkanai> |
| Component: | bin | Assignee: | Mike Heffner <mikeh> |
| Status: | Closed FIXED | ||
| Severity: | Affects Only Me | ||
| Priority: | Normal | ||
| Version: | 6.0-CURRENT | ||
| Hardware: | Any | ||
| OS: | Any | ||
Responsible Changed From-To: freebsd-bugs->mikeh I've been handling lukemftp imports. State Changed From-To: open->closed Fixed in NetBSD and imported into HEAD. Thanks! |
A buffer overflow exists in ftp(lukemftp). Fix: main.c:668 is a problem. fix thie code. > memcpy(line, buf, num); How-To-Repeat: Just use long filename. ex: ftp> get aaaaaaaaaaaa... (over 1024 = BUFSIZ) Segmentation fault (core dumped)