Re: Latest wu-ftpd exploit :-s

["Ragnar Paulson" <ragnar () wanware com>]

----- Original Message ----- 
From: "Mark Heiligen" <mark.heiligen () gmx at>
To: <bugtraq () securityfocus com>; <full-disclosure () lists grok org uk>
Sent: Monday, February 13, 2006 3:41 AM
Subject: Latest wu-ftpd exploit :-s


> http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php

Isn't this a three year old exploit?  Is this news?   CVE-2003-0466.

Upgrades for wu-ftpd have been available from the various vendors for just as long.

FWIW, I compiled and ran this against an old wu-ftpd server here and found it was not exploitable.

Ragnar Paulson
The Software Group Limited