Bugtraq mailing list archives

SECURITY ALERT - WAR FTP DAEMON ALL VERSIONS

From: jgaa () JGAA COM (Jarle Aase)
Date: Wed, 5 Jan 2000 12:41:05 +0100


There has been reported a serious security problem with War FTP Daemon 1.70. The problem may also affect 1.6* and 
previous versions. 

I am currently researching the problem, and will post an upgrade for 1.6* within 24 hours if that version is affected. 
A fix for 1.70 is in the works, but will not be available in a few days.

I STRONGLY ADVICE ALL SERVER OPERATORS TO TAKE THE SERVER OFF-LINE UNTIL FURTHER NOTICE!

I'm sorry for any inconvenience caused by this problem. 

Jarle

Current thread:

SECURITY ALERT - WAR FTP DAEMON ALL VERSIONS Jarle Aase (Jan 05)
- "SANS Flash Alert For Solaris" Chok Poh (Jan 05)
- Re: SECURITY ALERT - WAR FTP DAEMON ALL VERSIONS Sir Dystic (Jan 05)
- Stack Sheild 0.7 and SFP Overwrites vendicator () USA NET (Jan 07)
- Re: SECURITY ALERT - WAR FTP DAEMON ALL VERSIONS Jarle Aase (Jan 08)
- L0pht Advisory: LPD, RH 4.x,5.x,6.x Dildog (Jan 08)
- Buffer overflow with WinAmp 2.10 Transfer Interrupted (Jan 09)
- Yet another Hotmail security hole - injecting JavaScript using "jAvascript:" Georgi Guninski (Jan 10)