Bugtraq mailing list archives

Clarification

From: mgleason () NCFTP COM (Mike Gleason)
Date: Tue, 24 Mar 1998 19:45:15 -0600


First of all, I apologize for the tone of my previous message.

That'd being said, list readers should know that I have no objection
whatsoever about this or any future bug being posted here or anywhere.  I
agree that the users and administrators have a right to know about these
bugs.  All I ask is that when you send your message "To:
BUGTRAQ () NETSPACE ORG" that you also "CC: mgleason () ncftp com" while you're
at it.  I think if a contact e-mail address is readily available, that this
is a reasonable request to ask for any piece of software.

For the record, versions vulnerable to the MkDirs/Get -R bug:

  2.0.0 through 2.4.2

Not:

  1.0 (circa 1992) through 1.9.5 are not, but may have other problems.
  2.4.3
  Version 3.0 (still beta)
  NcFTPGet (all versions)

Versions 1, 2, and 3 are all available from the NcFTP download page,
http://www.ncftp.com/download/ .



Mike Gleason
NcFTP Software

Current thread:

Re: apache+ssl 1.13 symlink problem Ben Laurie (Mar 24)
- Re: apache+ssl 1.13 symlink problem; NcFTP 2.4.2+ Mike Gleason (Mar 24)
- Clarification Mike Gleason (Mar 24)
- Protocol Aleph One (Mar 24)
- SECURITY: new svgalib and kbd now available Erik Troan (Mar 25)
- Sumbit Internet Account v1.1 Dax Kelson (Mar 25)
  - Majordomo /tmp exploit Karl G - NOC Admin (Mar 26)
    - FW: mysql: Trivial mSQL/MySQL DoS method? (fwd) Michael Widenius (Mar 26)
    - Re: Majordomo /tmp exploit Steven Pritchard (Mar 26)
    - easy DoS in most RPC apps Peter van Dijk (Mar 28)
    - Netscape passes mailbox path and message ID as refferer Rop Gonggrijp (Mar 28)
    - Hole. HKirk (Mar 28)
    - Rhino9: WinGate Vulnerability Aleph One (Mar 29)

(Thread continues...)