Bugtraq mailing list archives

Re: ftpd: the advisory version


From: carson () TLA ORG (Carson Gaspar)
Date: Fri, 30 Jun 2000 20:05:20 -0400


"Mike" == Mike Eldridge <diz () CAFES NET> writes:

Mike> On Tue, 27 Jun 2000, Olaf Kirch wrote:
I.e. publicfile is able to drop root privs because it stops using port 20
when creating data connections in response to a PORT command. It's
against the spec but works with most clients.

Mike> Against spec, it may be, but in my opinion, it makes more sense.

FYI, it violates a SHOULD, it doesn't violate a MUST, so it is officially in
spec.

--
Carson Gaspar -- carson () tla org
Queen Trapped in a Butch Body



Current thread: