Subject: Re: wu-ftpd has a security hole
To: David Brownlee <abs@netbsd.org>
From: Rick Kelly <rmk@toad.rmkhome.com>
List: netbsd-users
Date: 11/30/2001 12:29:11
David Brownlee said:

>	wu-ftpd-2.6.1nb1 committed to pkgsrc - contains the globfix,
>	and verified to remove the vulnerability on a RedHat 5.0 system
>	(All of my NetBSD boxes run the NetBSD ftpd)

What I did was apply all three patches that they had.

ftpglob.patch
missing_format_strings.patch
nlst-shows-dirs.patch

-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com