• info
• discussion
• exploit
• solution
• references

Multiple BSD FTS Directory Traversal Race Condition Vulnerability

Solution:
Patches available:


NetBSD NetBSD 1.5

• NetBSD SA2001-016-fts.patch
  ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2001-016-fts.patch

NetBSD NetBSD 1.5.1

• NetBSD SA2001-016-fts.patch
  ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2001-016-fts.patch

OpenBSD OpenBSD 2.8

• OpenBSD 029_fts.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/029_fts.patch

FreeBSD FreeBSD 4.3 -STABLE

• FreeBSD fts.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:40/fts.patch

FreeBSD FreeBSD 4.3 -RELEASE

• FreeBSD fts.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:40/fts.patch