Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Kerberos Update for Red Hat
Posted by philipp on: 01/31/2003 12:52 PM [ Print | 0 comment(s) ]
Red Hat has released a kerberos security update for Red Hat Linux 6.2 - 8.0
A problem has been found in the Kerberos ftp client. When retrieving a file with a filename beginning with a pipe character, the ftp client will pass the filename to the command shell in a system() call. This could allow a malicious ftp server to write to files outside of the current directory or execute commands as the user running the ftp client.
06/27/2004 07:44 AM: kerberos (3) by iamroot