Washington University Information for VU#29823

Format string input validation error in wu-ftpd site_exec() function



Vendor Statement

The WU-FTPD Development Group's primary distribution site is mirrored world-wide. A list of mirrors is available from:

If possible, please use a mirror to obtain patches or the latest version.

Upgrade your version of wu-ftpd
The latest release of wu-ftpd, version 2.6.1, has been released to address these and several other security issues:
Apply a patch
The wu-ftpd developers have published the following patch for wu-ftpd 2.6.0: