From owner-freebsd-security Fri Nov 30 9: 4: 5 2001 Delivered-To: freebsd-security@freebsd.org Received: from straylight.ringlet.net (o1gw.nanolink.com [217.75.134.6]) by hub.freebsd.org (Postfix) with SMTP id 8852437B417 for ; Fri, 30 Nov 2001 09:04:00 -0800 (PST) Received: (qmail 41839 invoked by uid 1000); 30 Nov 2001 15:45:08 -0000 Date: Fri, 30 Nov 2001 17:45:08 +0200 From: Peter Pentchev To: Niels Heinen Cc: Vlad Martynov , freebsd-security@FreeBSD.ORG Subject: Re: Stock ftpd Message-ID: <20011130174508.A2056@straylight.oblivion.bg> Mail-Followup-To: Niels Heinen , Vlad Martynov , freebsd-security@FreeBSD.ORG References: <200111301516.fAUFGBY66566@dc.cis.okstate.edu> <20011130182915.A73088@ns.san.ru> <3C07AA28.90CBDCF@ubizen.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3C07AA28.90CBDCF@ubizen.com>; from niels.heinen@ubizen.com on Fri, Nov 30, 2001 at 04:47:52PM +0100 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Nov 30, 2001 at 04:47:52PM +0100, Niels Heinen wrote: > Vlad Martynov wrote: > > > > Hi! > > > > On Fri, Nov 30, 2001 at 09:16:11AM -0600, Martin G. McCormick wrote: > > > I am asking this question just to be safe. Is the ftp > > > daemon which is part of the normal FreeBSD distribution based on > > > wuftpd? In other words, my ftp server identifies as > > > > > > 220 hostname FTP server (Version 6.00LS) ready. > > > > > > Do I need to replace it? > > Yes. Use /usr/ports/ftp/wu-ftpd or /usr/ports/ftp/proftpd. As somebody else also pointed out, NO, the FTP server in the base system is NOT in any way based on wu-ftpd. You are perfectly safe using the base system ftpd. > > > Martin McCormick > > SY, Vlad > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > Has the wu-ftpd port already been fixed from the new globbing bug ? > Otherwise proftp might be a better choice ;-) The wu-ftpd port was fixed at Wed Nov 28 10:52:26 2001 UTC, about two days ago. Later, at Fri Nov 30 06:24:54 2001 UTC (about 9 hours ago), Andrey Chernov incorporated the vendor patch from the wu-ftpd authors. Both of these pieces of information were obtained by looking at http://cvsweb.FreeBSD.org/ :) G'luck, Peter -- You have, of course, just begun reading the sentence that you have just finished reading. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message