Description
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.
References
- wuftp-mailadmin-sockprintf-bo(13269) vdb-entry
- SSA:2003-259-03 vendor-advisory
- 1007775 vdb-entry
- 8668 vdb-entry
- 9835 third-party-advisory
- 2594 vdb-entry
- 20030922 Wu_ftpd all versions (not) vulnerability. mailing-list