----- Original Message ----- From: "Mark Heiligen" <mark.heiligen@xxxxxx> To: <bugtraq@xxxxxxxxxxxxxxxxx>; <full-disclosure@xxxxxxxxxxxxxxxxx> Sent: Monday, February 13, 2006 3:41 AM Subject: Latest wu-ftpd exploit :-s > http://www.frsirt.com/exploits/08.11.0x82-wu262-advanced.c.php > Isn't this a three year old exploit? Is this news? CVE-2003-0466. Upgrades for wu-ftpd have been available from the various vendors for just as long. FWIW, I compiled and ran this against an old wu-ftpd server here and found it was not exploitable. Ragnar Paulson The Software Group Limited