Re: Multiple-Vendor-FTP-Vuln. (old?)

[Robert van der Meulen <rvdm () debian org>]

Hi,

Quoting Michael Faurot (mfaurot () atww org):
> : i tested an old proftpd bug (ls /../*/../*/../*/../*/../*/../*/../*) on =
> : many new Linux-Dist.. 
> This bug appears to still be present with Debian Stable (Potato) which
> uses ProFTPd v1.2.0pre10.
Are you sure ? what exact version are you testing with ? 
I tested this with a couple of Debian stable machines, all running with the
latest security updates (i.e. proftpd 1.2.0pre10-2.0potato1), and couldn't
reproduce it.

Greets,
        Robert
-- 
                              Linux Generation
   encrypted mail preferred. finger rvdm () debian org for my GnuPG/PGP key.
        <doogie> 'How to Raise Your I.Q. by Eating Gifted Children'