Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 340555 - sys-libs/glibc: libc/glob(3) resource exhaustion (+0day remote ftpd-anon)
Summary: sys-libs/glibc: libc/glob(3) resource exhaustion (+0day remote ftpd-anon)
Status: RESOLVED DUPLICATE of bug 340061
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High critical (vote)
Assignee: Gentoo Security
Depends on:
Reported: 2010-10-11 16:58 UTC by Matt
Modified: 2010-10-11 17:08 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Matt 2010-10-11 16:58:28 UTC
A flaw in the implementation of the glob() function in various C libraries (libc) can be exploited to remotely cripple FTP servers. As many FTP servers allow anonymous log-ins, and the flaw is said to be easy to exploit, many servers are at risk of falling victim to the attack
Comment 1 Alex Legler (RETIRED) archtester gentoo-dev Security 2010-10-11 17:08:38 UTC

*** This bug has been marked as a duplicate of bug 340061 ***