Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| C_library | Fsp | * | 0.7 (including) |
| Gftp | Ubuntu | dapper | * |
| Gftp | Ubuntu | edgy | * |
| Gftp | Ubuntu | feisty | * |
| Gftp | Ubuntu | gutsy | * |
| Gftp | Ubuntu | upstream | * |