Date: Tue, 03 Oct 2000 07:00:10 -0700 From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca> To: Brett Glass <brett@lariat.org> Cc: Fernando Schapachnik <fpscha@via-net-works.net.ar>, security@FreeBSD.ORG Subject: Re: ftpd bug in FreeBSD through at least 3.4 Message-ID: <200010031400.e93E0fZ11189@cwsys.cwsent.com> In-Reply-To: Your message of "Mon, 02 Oct 2000 12:30:08 MDT." <4.3.2.7.2.20001002122853.04b25e00@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
Brett, send me the exploit and I will confirm it on some 4.x boxen for you. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/DEC Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC In message <4.3.2.7.2.20001002122853.04b25e00@localhost>, Brett Glass writes: > Fernando: > > I did NOT make a mistake. It works in FreeBSD's own ftpd in > FreeBSD 3.4 and earlier; maybe some later versions as well. > > --Brett > > At 12:24 PM 10/2/2000, Fernando Schapachnik wrote: > > >This describes a bug in wu-ftp, not in BSD-ftpd. > > > >Please double check before scaring us all. > > > >Regards! > > > >En un mensaje anterior, Brett Glass escribió: > >> I've received LOTS of anonymous FTP login attempts on the FreeBSD boxen > >> I administer, and have been wondering why. Perhaps this message explains > >> it! The below works on all 2.x versions of FreeBSD, and in the 3.x branch > >> up until at least 3.4-RELEASE (maybe later). > >[...]] > >> >Connected to 1127.0.0.1. > >> >220 somewhere.in.internet FTP server (Version wu-2.6.1(1) Mon Jul 3 10:49 > :59 > >> >EEST 2000) ready. > > > > > > > > > >Fernando P. Schapachnik > >Administración de la red > >VIA NET.WORKS ARGENTINA S.A. > >fernando@via-net-works.net.ar > >(54-11) 4323-3333 > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010031400.e93E0fZ11189>