Re: [Linux] glibc 2.1.x / wu-ftpd <=2.5 / BeroFTPD / lynx / vlock / mc / glibc 2.0.x

[David Wagner]

In article <[EMAIL PROTECTED]>,
Norbert Warmuth  <[EMAIL PROTECTED]> wrote:
> An off-by-one error, hardly to exploit especially since the value written
> is always '\0'.

Relying on that to protect you may not be prudent.  See
  http://www.geog.ubc.ca/snag/bugtraq/msg03213.html
for an example of an off-by-one error which only allowed to write a '\0'
yet was exploited in the field (!).