Re: Format String Vulnerability in Tripwire

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Format String Vulnerability in Tripwire
From: Ron Forrester <rjf@xxxxxxxxxxxx>
Date: 4 Jun 2004 17:51:12 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

In-Reply-To: <20040603215236.7815.qmail@xxxxxxxxxxxxxxxxxxxxx>


One more quick note -- I think I had a brain freeze and gave Paul the wrong 
commerical version numbers. This vulnerability exists in all currently shipping 
TFS releases, which means <= 4.0.1.

Sorry I didn't catch this the first time.

Ron Forrester
Security Architect
Tripwire, Inc.

>>VERSIONS AFFECTED
>>-----------------
>>Tripwire commercial versions <= 2.4
>>Tripwire open source versions <= 2.3.1
>

Prev by Date: bss-based buffer overflow in l2tpd
Next by Date: Re: Netgear WG602 Accesspoint vulnerability
Previous by thread: Re: Format String Vulnerability in Tripwire
Next by thread: Re: Format String Vulnerability in Tripwire
Index(es):
- Date
- Thread