CVE-2001-1323

CVE-2001-1323 concerns a buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier triggered by base-64 encoded data during radix_encode processing of FTP glob output in the gssapi-enabled ftpd. The underlying issue is a missing bounds check in the ftpglob/radix_encode handling, enabling potenti...

Security advisory: krb5 ftpd buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- KRB5 FTPD BUFFER OVERFLOWS 2001-04-25 SUMMARY: Buffer overflows exist in the FTP daemon included with MIT krb5. IMPACT: If anonymous FTP is enabled, a remote user may gain unauthorized root access. A user with access to a local account may gain unauthorized root...

Дырка в krb5 ftpd (buffer overflow)

Переполнение буфера...