<<< Date Index >>>     <<< Thread Index >>>

Re: ArGoSoft FTP server remote heap overflow



Hi,

as i replied privately to you, yes i think we can say that. You could
consider it as an update...
Note that the vendor was contacted without response.

Regards
/JA

Steven M. Christey a écrit :
> A buffer overflow in DELE was originally reported to Bugtraq by CorryL
> in March 2005, for ArGoSoft FTP 1.4.2.8 (CVE-2005-0696):
>
>   http://www.securityfocus.com/archive/1/392653
>
> According to CorryL's disclosure timeline, no patch had been released
> by the disclosure date.
>
> So, is this a rediscovery of that older issue, for the most recent
> version?
>
> - Steve
>
>
>