Re: Variations of firewall ruleset bypass via FTP

[Carson Gaspar <carson () taltos org>]

--On Friday, October 11, 2002 10:40 AM +0200 Mikael Olsson 
<mikael.olsson () clavister com> wrote:

> Yes, if an attacker can create file names with CRLFs in them, we're
> most likely screwed no matter what we're running.

Unless the FTP software authors finally decide to support the RFC that 
telnet-escapes CR.

--
Carson

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards