Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Debian: DSA-016-2 Moderate: Wu-FTPD Temp File and Exploit Risk

debian
Calendar Grey January 23, 2001
Debian Logo
Debian announces a recompile of Wu-FTPD to mitigate temp file and format string exploit risks. Upgrade recommended.
This additional advisory only announces a recompile of the package forthe Intel ia32 architecture.

Summary

Security people at WireX have noticed a temp file creation bug and the
WU-FTPD development team has found a possible format string bug in
wu-ftpd. Both could be remotely exploited, though no such exploit
exists currently.

This additional advisory only announces a recompile of the package for
the Intel ia32 architecture. The upload from yesterday was lacking
PAM support. This only required a recompile and contains no other fixes.

For upgrading please use

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

Or use an automated update by adding the resources from the footer to
the proper configuration.


Debian GNU/Linux 2.2 alias potato

Intel ia32 architecture:


MD5 checksum: e0521153d6c9c23082edb29cc8d03fd3

These files will be moved into
soon.


For apt-get: deb Debian -- Security Information stable/updates main
For dpkg-ftp: dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
...

Read the Full Advisory

Package: wu-ftpd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here