[Xitami] Imatix Xitami If-Modified-Since Remote Buffer Overflow Vulnerability

[Francis Turner]

FWIW I can confirm that a perl ver of the explot code does kill my xitami

On 10/2/07, Paul Reid <preid at rci.rutgers.edu> wrote:
> The @RISK newsletter reports that SecurityFocus is listing an Xitami
> vulnerability:
>
> http://www.securityfocus.com/bid/25772/discuss
>
> "remote buffer-overflow vulnerability ... execute arbitrary code in the
> context of the affected application."
>
> An exploit in Python code is posted at
> http://downloads.securityfocus.com/vulnerabilities/exploits/xitami_exp.py
>
>
> --
> Paul Reid
> System Administrator
> Music Department
> Mason Gross School of the Arts
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>


-- 
http://www.di2.nu/blog.htm
Faber's Fourth Law:
  Necessity is the mother of strange bedfellows.