nanog mailing list archives

Re: FTP exploit?


From: Daniel Roesen <droesen () entire-systems com>
Date: Tue, 20 Mar 2001 11:07:26 +0100


On Mon, Mar 19, 2001 at 07:17:32PM -0500, ken harris. wrote:
it was another one of those 'i'm so elite i'm going to
notify the vendors 30 minutes before posting to bugtraq'

15 minutes. And this <censored> even ran a DoS attack against
ftp.proftpd.org to prove his point.

so right now vendors are working on latest versions.

For ProFTPD a workaround exists. For the interested ones:
http://www.proftpd.org/critbugs.html


Best regards,
Daniel (ProFTPD RPM packaging maintainer)




Current thread: