🚀 go-pugleaf

In article <97cngt$mop$2@news.panix.com>, snorwood@redballoon.net (Scott 
Norwood) writes...

> The "connection" has nothing to do with the exchange of a
> username/password pair.  I can "connect" to your FTP server just
> by typing "telnet somehost 21" (or by using any other utility that
> creates TCP connections...netcat, etc.).  The username/password
> pair cannot be exchanged until the connection exist.  The fact that
> an FTP server is basically useless until the username/password
> pair has been exchange is irrelevant to the question of when the
> actual connection has been established.


Actually not quite.  It could be "useful" to a person trying
to exploit a vulnerability in that server - ie one of the 
many wu-ftpd exploits.

Therefore even without a username/password, you could gain
access to the system to either A) do something innocuous
like access public files or B) access files that the owner
did not intend for you to access or even C) cause damage 
to the host.



-- 
Philip J. Koenig         The Electric Kahuna Organization       [anti-spammed]
----------------Computers & Communications for the New Millennium-------------
* To send email, remove numbers and spaces:  pjkunet64 @  ekahuna27 . com    *
*      Vision impaired?  Try taking off the blacklist-colored glasses.       *
* Simple answers are for simple minds.  Try a new way of looking at things.  *