Re: [Full-disclosure] Vulnerability in Linux Kiss Server v1.2

2008-03-07 Thread David Judais
Sorry, my response became detached from the original thread somehow. On Wed, Mar 5, 2008 at 4:29 PM, David Judais [EMAIL PROTECTED] wrote: Why isn't there a patch? From: [EMAIL PROTECTED] Site: http://www.vashnukad.com Application: Linux Kiss Server v1.2 Type: Format strings

Re: [Full-disclosure] Vulnerability in Linux Kiss Server v1.2

2008-03-05 Thread David Judais
Why isn't there a patch? From: [EMAIL PROTECTED] Site: http://www.vashnukad.com Application: Linux Kiss Server v1.2 Type: Format strings Priority: Medium Patch available: No The Linux Kiss Server contains a format strings vulnerability that, if run in foreground mode, can be leveraged for