Vulnerability Development: FTP.EXE format string vulnerability

[ByteRage <byterage () yahoo com>]

It probably doesn't matter much,
but besides the buffer overflow problem announced by
Eliel C. Sardañons, FTP.EXE also contains format
string vulnerabilities :

example :

QUOTE GET %x

the %x will be changed into a hex number, as you might
see in the FTP Server logs
Not a big deal but its annoying if you want to check
*servers* for format string vulnerabilities... :(



__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/