Date: Fri, 30 Nov 2001 16:09:54 -0500 From: Kutulu <kutulu@kutulu.org> To: Brent <misterb@cybertours.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: wu-ftp vulnerablility Message-ID: <20011130160954.A38236@pr0n.kutulu.org> In-Reply-To: <007b01c179d9$c3fd5c30$d02b82d0@Misterb>; from misterb@cybertours.com on Fri, Nov 30, 2001 at 03:01:13PM -0500 References: <007b01c179d9$c3fd5c30$d02b82d0@Misterb>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Nov 30, 2001 at 03:01:13PM -0500, Brent wrote:
> my question is this ...what version does FBSD 4.3 run out of the box ?? is it wu-ftp ??
> or something else ....and if it is wu-ftp ...how come there are no posts on FreeBSD.org saying so.??
FreeBSD has it's own FTP daemon that is run out-of-box. Unless you
installed wu-ftpds from ports, these wu-specific ftpd problems won't affect
you. I also don't beleive the glob() that's in FreeBSD's libc is affected
by the same bug as glibc's globc(), so ftpd servers that use the underlying
glob() should also be ok.
For the record, I checked the glob("{") problem against BSD's stock server,
and ProFTPD, both running FreeBSD 4.4-STABLE, both handled the request
correctly.
--K
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011130160954.A38236>