Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Jun 1999 23:49:34 -0300
From:      Glenn Campbell <glenn@snoopy.v-net.org>
To:        freebsd-net@freebsd.org
Subject:   FTP server problem
Message-ID:  <3.0.6.32.19990624234934.007a2490@snoopy.v-net.org>

next in thread | raw e-mail | index | archive | help
I maintain an ftp server on a BSD 2.2.6 box. presently when a user attempts
to log into the box using a client such as cuteftp, or an ftp shell (such
as the one that comes with windows 98) they get placed in their home dir
(in the case of non-anonymous), or the ftp-root (anonymous ftp). However,
if a user connects with a web browser they always go to /. This is a real
security hole for me because users can get into /etc with ease. I have
tried adding user names to /etc/ftp-chroot and this seems to prevent them
from viewing anything when they login using a web browser, however they are
still being directed to /.

Any help greatly appreciated

Glenn Campbell
Systems Technician
Canadian Coast Guard College
Sydney, Nova Scotia
Canada


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.6.32.19990624234934.007a2490>