From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ldv@alt-linux.org>
Date: Thu, 20 Dec 2001 15:53:16 +0300
From: "Dmitry V. Levin" <ldv@alt-linux.org>
To: devel@altlinux.ru
Subject: Re: [devel] Re: Fw: ProFTPD - Problems in file globbing, gives segmentation fault.
Message-ID: <20011220125316.GA19012@ldv.office.alt-linux.org>
Mail-Followup-To: devel@altlinux.ru
References: <20011219211416.797d79e6.fc@altlinux.ru> <20011219210255.GD1787@localhost.localdomain>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="jRHKVT23PllUwdXP"
Content-Disposition: inline
In-Reply-To: <20011219210255.GD1787@localhost.localdomain>
X-fingerprint: 9658 398D 181B 1200 8FC5  26B8 F6F8 846B C1E2 3429
Sender: devel-admin@altlinux.ru
Errors-To: devel-admin@altlinux.ru
X-BeenThere: devel@altlinux.ru
X-Mailman-Version: 2.0
Precedence: bulk
Reply-To: devel@altlinux.ru
List-Help: <mailto:devel-request@altlinux.ru?subject=help>
List-Post: <mailto:devel@altlinux.ru>
List-Subscribe: <http://altlinux.ru/mailman/listinfo/devel>,
	<mailto:devel-request@altlinux.ru?subject=subscribe>
List-Id: <devel.altlinux.ru>
List-Unsubscribe: <http://altlinux.ru/mailman/listinfo/devel>,
	<mailto:devel-request@altlinux.ru?subject=unsubscribe>
List-Archive: <http://altlinux.ru/pipermail/devel/>
Archived-At: <http://lore.altlinux.org/devel/20011220125316.GA19012@ldv.office.alt-linux.org/>
List-Archive: <http://lore.altlinux.org/devel/>
List-Post: <mailto:devel@altlinux.org>

--jRHKVT23PllUwdXP
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

On Thu, Dec 20, 2001 at 12:02:55AM +0300, Mikhail Zabaluev wrote:
> > Date: Wed, 19 Dec 2001 14:22:40 +0100
> > From: "Mattias _" <surre1@hotmail.com>
> > To: bugtraq@securityfocus.com
> > Subject: ProFTPD - Problems in file globbing, gives segmentation fault.
> 
> Я подозреваю, что это недавно открытая проблема с glob в glibc.
> Надеюсь вскоре увидеть security update.

Нет, там некорректная инициализация указателя (в статическую память), это
не exploitable, поэтому security update, скорее всего, не будет.

По поводу security update для glibc я еще не решил.


Regards,
	Dmitry

+-------------------------------------------------------------------------+
Dmitry V. Levin     mailto://ldv@alt-linux.org
ALT Linux Team      http://www.altlinux.ru/
Fandra Project      http://www.fandra.org/
+-------------------------------------------------------------------------+
UNIX is user friendly. It's just very selective about who its friends are.

--jRHKVT23PllUwdXP
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8Id889viEa8HiNCkRAkeUAJ4oRpArT5fBftkxiq/7boAK3WXU0QCfQ2OL
b9Hlq1vnqfO8eOszq1h/LPI=
=D31E
-----END PGP SIGNATURE-----

--jRHKVT23PllUwdXP--