Bugtraq mailing list archives
Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
From: 3APA3A <3APA3A () SECURITY NNOV RU>
Date: Fri, 30 Nov 2007 12:48:43 +0300
Dear Valdis.Kletnieks () vt edu, --Friday, November 30, 2007, 1:19:49 AM, you wrote to 3APA3A () SECURITY NNOV RU:
An attacker who can convince an user to extract a specially crafted archive can overwrite arbitrary files with the permissions of the user running gtar. If that user is root, the attacker can overwrite any file on the system.
VKve> Apparently, somebody at FreeBSD thinks "can be exploited if you trick the VKve> user into doing something" is a valid attack vector. This is valid factor. The difference is, if you can force user to extract archive, you need vulnerability in gtar in order to exploit. If you can force user to run executable script, you need no vulnerability in FTP client to exploit this. -- ~/ZARAZA http://securityvulns.com/ Неприятности начнутся в восемь. (Твен)
Current thread:
- Microsoft FTP Client Multiple Bufferoverflow Vulnerability Rajesh Sethumadhavan (Nov 28)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability 3APA3A (Nov 29)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 29)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Steve Shockley (Nov 29)
- Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Matthew Leeds (Nov 30)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Vincent Archer (Nov 30)
- Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability 3APA3A (Nov 30)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 29)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability 3APA3A (Nov 29)