OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Evilness in gssftp/ftpd
From: lamonticopyright.com
Date: Thu Jun 29 2000 - 18:45:33 CDT


krb5-1.1.1/src/appl/gssftp/ftpd

check out secure_error(), reply(), lreply(), secure_fprintf() and
retrieve()

i haven't finished auditing this one, so i don't know if any of it is
exploitable.