Re: Latest wu-ftpd exploit :-s

["Ragnar Paulson" <ragnar@xxxxxxxxxxx>]

----- Original Message ----- 
From: "Mark Heiligen" <mark.heiligen@xxxxxx>
To: <bugtraq@xxxxxxxxxxxxxxxxx>; <full-disclosure@xxxxxxxxxxxxxxxxx>
Sent: Monday, February 13, 2006 3:41 AM
Subject: Latest wu-ftpd exploit :-s


> http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php
> 

Isn't this a three year old exploit?  Is this news?   CVE-2003-0466.

Upgrades for wu-ftpd have been available from the various vendors for just as 
long.

FWIW, I compiled and ran this against an old wu-ftpd server here and found it 
was not exploitable.

Ragnar Paulson
The Software Group Limited