From owner-freebsd-security Mon Jun 9 14:31:16 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id OAA15969 for security-outgoing; Mon, 9 Jun 1997 14:31:16 -0700 (PDT) Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.fr [193.56.58.253]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id OAA15958 for ; Mon, 9 Jun 1997 14:31:09 -0700 (PDT) Received: from brasil.brainstorm.eu.org (brasil.brainstorm.fr [193.56.58.33]) by mexico.brainstorm.eu.org (8.8.4/8.8.4) with ESMTP id XAA04142 for ; Mon, 9 Jun 1997 23:31:03 +0200 Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.8.4/8.6.12) with UUCP id XAA04462 for security@FreeBSD.ORG; Mon, 9 Jun 1997 23:30:46 +0200 Received: (from roberto@localhost) by keltia.freenix.fr (8.8.5/keltia-uucp-2.9) id WAA05619; Mon, 9 Jun 1997 22:55:20 +0200 (CEST) Message-ID: <19970609225520.40070@keltia.freenix.fr> Date: Mon, 9 Jun 1997 22:55:20 +0200 From: Ollivier Robert To: security@FreeBSD.ORG Subject: Re: ftpd security weakness on FreeBSD (fwd) References: <199706090256.WAA23765@homeport.org> <199706091557.IAA10313@passer.osg.gov.bc.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.67 In-Reply-To: <199706091557.IAA10313@passer.osg.gov.bc.ca>; from Cy Schubert - ITSD Open Systems Group on Mon, Jun 09, 1997 at 08:57:26AM -0700 X-Operating-System: FreeBSD 3.0-CURRENT ctm#3359 AMD-K6 MMX @ 208 MHz Sender: owner-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk According to Cy Schubert - ITSD Open Systems Group: > Another good ftpd daemon is anonftpd. It only supports anonymous ftp and a > subset of features. Sites offering an anonymous ftp service could use the The main problem of anonftpd is the non standard format of "ls". This will confuse the Hell out of many mirroring script/programs. Apart from that "feature", it seems fine. -- Ollivier ROBERT -=- FreeBSD: There are no limits -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #18: Sun Jun 8 15:32:28 CEST 1997