Re: Security Problem ftpd (includes wu.ftpd 2.4 and 2.4.2 beta 4)

[casper () Holland Sun COM (Casper Dik)]

> > Am I correct in stating that this problem only occurs on SVR4 based unix's
> > [where /proc exists]?  Or would, say, SunOS 4.1.x be affected?
>
> This affect's Linux's /proc, but may well be an issue with SVR4's /dev/fd
> directory.  While this doesn't exist by default on SunOS 4, there is a
> commonly available kernel driver to implement it.


The /dev/fd pseudo directory gives access only to the filedescriptors
of the current process.  They don't give access to outside processes.

Casper