Bugtraq mailing list archives

Re: WU-ftpd Upload Ownership/Permissions Bug


From: mbrennen () fni com (Michael Brennen)
Date: Wed, 25 Jun 1997 10:36:10 -0500


Please reread my post.  I did find a hole, it just was not as prevalent as
I thought (perhaps more insidious because of that).  It might not be the
normal case, but it is possible without the fix to configure the wu-ftpd
daemon in such a way that one's security configuration is ignored.

   -- Michael

On Tue, 24 Jun 1997, Juan Valdez wrote:

After reading the original WU-ftpd post by Michael Brennen, then reading
this one, I thank him greatly for making sure that we all were informed
about this error on his behalf.  While I dont make advisory posts here,
I do feel we all could learn from this.  To take a look at what we have
noted as a hole, and then recheck it to make sure there are no mistakes.



Current thread: