Specific vendor information regarding this vulnerability is given in Section 3.1. 3.1 Vendor patches The following vendors have provided information concerning the vulnerability status of their ftpd distribution. If your vendor is not listed below, you should contact your vendor directly. Information on these distributions is contained in Appendix A. Sites should note that these third party ftpd distributions may offer some different functionality to vendor versions of ftpd. Previously released singular ECO patches that were identified for this problem have been superseded in the aggregate versions of the ECO patch kits.
All patches are available now.
Your version of bos.net.tcp.client should be 4.1.5.3 or later. Your version of bos.net.tcp.client should be 4.2.1.0 or later. IBM and AIX are registered trademarks of International Business Machines Corporation. The signal handling code in wu-ftpd has some security problems which allows users to read all files on your system. A new version of wu-ftpd is now available for Red Hat 4.0 which Red Hat suggests installing on all of your systems.