• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Focus On: Vista
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns

• info
• discussion
• exploit
• solution
• references

Wu-Ftpd File Globbing Heap Corruption Vulnerability

Solution:
Fixes are available. Please see the references for more information.


Washington University wu-ftpd 2.6 .0

• HP WU-FTPD 2.6.1
  http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProdu ctInfo.pl?productNumber=WUFTPD26


• SuSE 6.3 alpha wuftpd-2.6.0-250.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/n1/wuftpd-2.6.0-250.alpha.r pm


• SuSE 6.3 i386 wuftpd-2.6.0-347.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/n1/wuftpd-2.6.0-347.i386.r pm


• SuSE 6.4 alpha wuftpd-2.6.0-251.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/n1/wuftpd-2.6.0-251.alpha.r pm


• SuSE 6.4 i386 wuftpd-2.6.0-344.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/n1/wuftpd-2.6.0-344.i386.r pm


• SuSE 6.4 ppc wuftpd-2.6.0-278.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/n1/wuftpd-2.6.0-278.ppc.rpm


• SuSE 7.0 alpha wuftpd-2.6.0-251.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/n1/wuftpd-2.6.0-251.alpha.r pm


• SuSE 7.0 i386 wuftpd-2.6.0-344.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/n1/wuftpd-2.6.0-344.i386.r pm


• SuSE 7.0 ppc wuftpd-2.6.0-279.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/n1/wuftpd-2.6.0-279.ppc.rpm


• SuSE 7.0 sparc wuftpd-2.6.0-241.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/n1/wuftpd-2.6.0-241.sparc .rpm


• SuSE 7.1 alpha wuftpd-2.6.0-252.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/n2/wuftpd-2.6.0-252.alpha.r pm


• SuSE 7.1 i386 wuftpd-2.6.0-346.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/wuftpd-2.6.0-346.i386.r pm


• SuSE 7.1 ppc wuftpd-2.6.0-277.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n2/wuftpd-2.6.0-277.ppc.rpm


• SuSE 7.1 sparc wuftpd-2.6.0-242.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/n2/wuftpd-2.6.0-242.sparc .rpm


• SuSE 7.2 i386 wuftpd-2.6.0-344.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/n2/wuftpd-2.6.0-344.i386.r pm


• SuSE 7.3 i386 wuftpd-2.6.0-344.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n2/wuftpd-2.6.0-344.i386.r pm


• SuSE 7.3 ppc wuftpd-2.6.0-277.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n2/wuftpd-2.6.0-277.ppc.rpm


• SuSE 7.3 sparc wuftpd-2.6.0-240.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n2/wuftpd-2.6.0-240.sparc .rpm


• Washington University ftpglob.patch
  ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/ftpglob.pat ch

Washington University wu-ftpd 2.6.1

• Caldera erg711907.tar
  ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.1/erg711 907.tar


• Caldera eDesktop 2.4 wu-ftpd-2.6.1-13OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS/wu-ftpd-2. 6.1-13OL.i386.rpm


• Caldera eServer 2.3.1 wu-ftpd-2.6.1-13OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS/wu-ftpd-2.6 .1-13OL.i386.rpm


• Caldera OpenLinux 2.3 wu-ftpd-2.6.1-13OL.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS/wu-ftpd-2 .6.1-13OL.i386.rpm


• Caldera OpenLinux 3.1 Server wu-ftpd-2.6.1-13.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/wu -ftpd-2.6.1-13.i386.rpm


• Mandrake 1.0.1 i586 wu-ftpd-2.6.1-8.7mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake 7.1 i586 wu-ftpd-2.6.1-8.7mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake 7.2 i586 wu-ftpd-2.6.1-8.8mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake 8.0 i586 wu-ftpd-2.6.1-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake 8.0 ppc wu-ftpd-2.6.1-11.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake 8.1 i586 wu-ftpd-2.6.1-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• Red Hat 6.2 alpha wu-ftpd-2.6.1-0.6x.21.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/wu-ftpd-2.6.1-0.6x.21.alpha.r pm


• Red Hat 6.2 i386 wu-ftpd-2.6.1-0.6x.21.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/wu-ftpd-2.6.1-0.6x.21.i386.rpm


• Red Hat 6.2 sparc wu-ftpd-2.6.1-0.6x.21.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/wu-ftpd-2.6.1-0.6x.21.sparc.r pm


• Red Hat 7.0 alpha wu-ftpd-2.6.1-16.7x.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/wu-ftpd-2.6.1-16.7x.1.alpha.r pm


• Red Hat 7.0 i386 wu-ftpd-2.6.1-16.7x.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/wu-ftpd-2.6.1-16.7x.1.i386.rpm


• Red Hat 7.1 alpha wu-ftpd-2.6.1-16.7x.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/wu-ftpd-2.6.1-16.7x.1.alpha.r pm


• Red Hat 7.1 i386 wu-ftpd-2.6.1-16.7x.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/wu-ftpd-2.6.1-16.7x.1.i386.rpm


• Red Hat 7.1 ia64 wu-ftpd-2.6.1-16.7x.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/wu-ftpd-2.6.1-16.7x.1.ia64.rpm


• Red Hat 7.2 i386 wu-ftpd-2.6.1-20.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/wu-ftpd-2.6.1-20.i386.rpm


• Washington University ftpglob.patch
  ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/ftpglob.pat ch


• Wirex Immunix 7.0 i386 wu-ftpd-2.6.1-6_imnx_4.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/wu-ftpd-2.6.1-6 _imnx_4.i386.rpm