[VIM] RaidenFTPD vulnerability fixed? (fwd)

[Steven M. Christey]

Inquiry sent to RaidenFTPD to get authoritative acknowledgement.

Usually I like to have proof when a vendor releases a vague advisory that
appears around the same time as a third party advisory - you can never be
absolutely sure which bug(s) they fixed.

- Steve


---------- Forwarded message ----------
Date: Tue, 10 May 2005 21:13:44 -0400 (EDT)
From: Steven M. Christey <coley at mitre.org>
To: johnlong at RaidenFTPD.com
Cc: coley at mitre.org
Subject: RaidenFTPD vulnerability fixed?


Hello,

I am the editor of CVE, a resource for computer security professionals
regarding vulnerabilities.

Recently, a vulnerability was posted to various security mailing lists
regarding a directory traversal issue in RaidenFTPD before 2.4.2241:

  http://marc.theaimsgroup.com/?l=bugtraq&m=111507556127582&w=2

There was also an announcement of a vulnerability to the RaidenFTPD
forum a couple weeks earlier, at:

  http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685

Are these in fact the same issue?


Regards,
Steve Christey
CVE Editor