Bug 340555

Summary:	sys-libs/glibc: libc/glob(3) resource exhaustion (+0day remote ftpd-anon)
Product:	Gentoo Security	Reporter:	Matt <jackdachef>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Matt 2010-10-11 16:58:28 UTC

A flaw in the implementation of the glob() function in various C libraries (libc) can be exploited to remotely cripple FTP servers. As many FTP servers allow anonymous log-ins, and the flaw is said to be easy to exploit, many servers are at risk of falling victim to the attack

http://www.h-online.com/open/news/item/Flaw-in-libc-implementation-threatens-FTP-servers-1103319.html

http://securityreason.com/securityalert/7822

Comment 1 Alex Legler (RETIRED) archtester

2010-10-11 17:08:38 UTC


*** This bug has been marked as a duplicate of bug 340061 ***