CVE-2009-4593

CVE-2009-4593 affects Bftpd up to version 2.4. The bftpdutmp_log function in bftpdutmp.c does not append a null terminator to the ut.bu_host string, which could allow remote attackers to trigger a denial of service (daemon crash) through unspecified vectors. Consequences are remote DoS; exploitat...