Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability

From: Valdis.Kletnieks@xxxxxx
Date: Wed, 28 Nov 2007 12:27:14 -0500

On Wed, 28 Nov 2007 12:05:24 +0100, "KJK::Hyperion" said:

Rajesh Sethumadhavan ha scritto:

Microsoft FTP Client Multiple Bufferoverflow
Vulnerability

Isn't the FTP client compiled with stack overflow protection?

Not all buffers live on the stack.

Attachment: pgp3dEDBzA4Gk.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  - From: Rajesh Sethumadhavan
- Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  - From: KJK::Hyperion

Prev by Date: [Full-disclosure] Secunia Research: Symantec Backup Exec Job Engine Denial of Service
Next by Date: [Full-disclosure] [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs
Previous by thread: Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
Next by thread: Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
Index(es):
- Date
- Thread

Relevant Pages

Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability
... Isn't the FTP client compiled with stack overflow protection? ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)
Re: [Full-disclosure] [funsec] in Memory of Dude VanWinkle / Justin Plazzo
... Fun and Misc security discussion for OT posts. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)
Re: [Full-disclosure] Pangolin v1.2.590 - The best SQLinjector youve ever seen
... > Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Full-Disclosure - We believe in it. ... Hosted and sponsored by Secunia - http://secunia.com/ ... Realex Payments, London, www.realexpayments.co.uk ...
(Full-Disclosure)
Re: [Full-disclosure] Undisclosed breach at major US facility
... This made it impossible for me to get timely legal help. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)
Re: [Full-disclosure] CyTRAP Labs - Urs+Nahums Security Checklist
... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)