Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 340555

Summary: sys-libs/glibc: libc/glob(3) resource exhaustion (+0day remote ftpd-anon)
Product: Gentoo Security Reporter: Matt <jackdachef>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Severity: critical    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Package list:
Runtime testing required: ---

Description Matt 2010-10-11 16:58:28 UTC
A flaw in the implementation of the glob() function in various C libraries (libc) can be exploited to remotely cripple FTP servers. As many FTP servers allow anonymous log-ins, and the flaw is said to be easy to exploit, many servers are at risk of falling victim to the attack
Comment 1 Alex Legler (RETIRED) archtester gentoo-dev Security 2010-10-11 17:08:38 UTC

*** This bug has been marked as a duplicate of bug 340061 ***