--- wu-ftpd-2.6.2-orig/src/ftpd.c Thu Nov 29 17:56:11 2001 +++ wu-ftpd-2.6.2/src/ftpd.c Thu Jan 22 13:38:33 2004 @@ -1662,9 +1662,9 @@ /* Display s/key challenge where appropriate. */ if (pwd == NULL || skeychallenge(&skey, pwd->pw_name, sbuf)) - sprintf(buf, "Password required for %s.", name); + snprintf(buf, sizeof(buf)-1, "Password required for %s.", name); else - sprintf(buf, "%s %s for %s.", sbuf, + snprintf(buf, sizeof(buf)-1, "%s %s for %s.", sbuf, pwok ? "allowed" : "required", name); return (buf); }