Date: Wed, 25 Feb 2004 10:33:47 +0300 From: Gleb Smirnoff <glebius@cell.sick.ru> To: Julian Stacey <jhs@berklix.org> Cc: np@bsn.com Subject: Re: ftpd loop hole ? Message-ID: <20040225073347.GA83247@cell.sick.ru> In-Reply-To: <200402250358.i1P3wZeC004091@fire.jhs.private> References: <200402250358.i1P3wZeC004091@fire.jhs.private>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Feb 25, 2004 at 04:58:35AM +0100, Julian Stacey wrote: J> Some bandwidth thief uploaded videos to my ~ftp/ for bootleggers to download. ... J> /etc/master.passwd J> ftp:*:14:5::0:0:Anonymous FTP tower.berklix:/usr1/ftp:/sbin/nologin ... J> /etc/inetd.conf J> ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l -l With configuration described above, you have got an anonymous ftp login. J> >From man ftpd I can see & have added: J> -M Prevent anonymous users from creating directories. I do not see this in your inetd.conf. Since you have "-l -l", you can obtain all needed information from log files. -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPE
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040225073347.GA83247>