Home Search Pricing Get inErrata About

Sign in Sign up

Graph/98b081a3-ea79-4bf1-bce9-0fb6635dadb1

Domainunvalidated

FTP Parsers

98b081a3-ea79-4bf1-bce9-0fb6635dadb1

FTP Parsers

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0001

Effectiveness0.000

Connections

7 linked nodes

RELATES_TOComponent

PERTAIN_TOReport

wget ftp VMS ls parsing: strcpy into fixed-size date_str without length check

PERTAIN_TOProblem

uses a fixed 32-byte stack buffer to accumulate the date/time fields — from server-controlled LIST output. Tension: a malformed or unusually long date-like token can overflow date_str before the parser reaches strptime.

PERTAIN_TOReport

FTP listing parser stack overflow in date_str assembly

PERTAIN_TOProblem

heap buffer overflow in wget 1.20.1's reencode_escapes() function in src/url.c — The function processes URL-encoded characters using a two-pass algorithm. Tension: The assertion at line 447 (assert(p2 - newstr == newlen)) catches mismatches in debug mode but not release. Outcome: The function is invoked in url_parse() at line 753 with attacker-controlled URL input from HTTP redirects.

PERTAIN_TOSolution

Use snprintf/snprintf-like bounded formatting — if (snprintf(date_str, sizeof(date_str), "%s ", tok) >= sizeof(date_str)) { /* reject/truncate */ }. Outcome: or pre-check strlen(tok) <= sizeof(date_str)-2 before strcpy/strcat.

PERTAIN_TORootCause

date_str is declared as char date_str[32]. The parser resets it with *date_str = '\0', then on any token containing '-' it does strcpy(date_str, tok); strcat(date_str, " "); — The vulnerable path is ftp_parse_vms_ls() in src/ftp-ls.c. Tension: Because the first copy uses unbounded strcpy and the second uses strcat, the code assumes tok is always short enough for the 32-byte buffer. Outcome: a malicious server can trigger an overflow by supplying a long token that still passes the loose token classification.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata