Grabbing your pw file from anonymous FTP

Article View: comp.security.misc

Article #504

Back to comp.security.misc Previous Next

#504

From: Douglas Floyd
Date: Tue, 10 Nov 1992 20:56

14 lines
1009 bytes

  What keeps any person who can anonymous ftp from going down your
etc directory and grabbing the passwd file?  Does ftp log this?  I
know that some Unix systems use a chroot system to lock anonymous
ftp users into a restricted section of the directory.  Do all
ftp systems do this?

adTHANKSvance,

-- 
******* ifbb657@ccwf.cc.utexas.edu (Douglas R. Floyd) ******
            Disclaimer: I speak for myself.

            Please, no NeXTMail at this time.

Technical Details

Message-ID: <83347@ut-emx.uucp>

Path:

arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!taco!gatech!darwin.sura.net!jvnc.net!yale.edu!qt.cs.utexas.edu!cs.utexas.edu!ut-emx!ccwf.cc.utexas.edu!ifbb657

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!taco!gatech!darwin.sura.net!jvnc.net!yale.edu!qt.cs.utexas.edu!cs.utexas.edu!ut-emx!ccwf.cc.utexas.edu!ifbb657
From: ifbb657@ccwf.cc.utexas.edu (Douglas Floyd)
Newsgroups: comp.security.misc
Subject: Grabbing your pw file from anonymous FTP
Message-ID: <83347@ut-emx.uucp>
Date: 10 Nov 92 20:56:04 GMT
Sender: news@ut-emx.uucp
Reply-To: ifbb657@ccwf.cc.utexas.edu (Douglas Floyd)
Organization: The University of Texas at Austin, Austin TX
Lines: 14
Originator: ifbb657@donald.cc.utexas.edu