Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

JFTPGW Remote Syslog Format String Vulnerability

jftpgw FTP proxy is prone to a remotely exploitable format string vulnerability.

This issue could be exploited to execute arbitrary code in the context of the process, which is usually run as nobody (or an equivalent user). This is due to insecure usage of the syslog() function.







 

Privacy Statement
Copyright 2008, SecurityFocus