From owner-freebsd-isp Wed Jun 10 06:20:37 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA25613 for freebsd-isp-outgoing; Wed, 10 Jun 1998 06:20:37 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from caladan.tdx.co.uk (caladan.tdx.co.uk [195.188.177.4]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA25568 for ; Wed, 10 Jun 1998 06:20:30 -0700 (PDT) (envelope-from kpielorz@tdx.co.uk) Received: from tdx.co.uk (lorca-tx.tdx.co.uk [195.188.177.242]) by caladan.tdx.co.uk (8.8.8/8.8.8) with ESMTP id OAA24368 for ; Wed, 10 Jun 1998 14:20:28 +0100 (BST) (envelope-from kpielorz@tdx.co.uk) Message-ID: <357E881C.8061DFA6@tdx.co.uk> Date: Wed, 10 Jun 1998 14:20:28 +0100 From: Karl Pielorz Organization: TDX X-Mailer: Mozilla 4.05 [en] (WinNT; I) MIME-Version: 1.0 To: isp@FreeBSD.ORG Subject: wu-ftpd problems? Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I'm running wu-ftpd from the ports collection on a 2.2.2 box... (wu-ftpd version 'wu-2.4.2-academ[BETA-13](1)'. I've just noticed that the following file: -rw-r--r-- root bin index.html Can be renamed by someone logging into the ftp server as 'wwwadmin' (group wwwadmin) - and doing a rename from CuteFTP - they can rename the file to something like: -rw-r--r-- root bin youstink.html The directory the file is in is: -rwxr-xr-x wwwadmin bin Am I doing something funny - is there something I've missed - or is it more likely to be a misconfigured wu-ftpd? We've also been looking at switching back to the regular (i.e. ships with FreeBSD ftpd) - as it will support nice things like internal 'ls' etc... Anyone got any comments on this? Regards, Karl Pielorz To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message