Article View: comp.security.misc
Article #506Re: Grabbing your pw file from anonymous FTP
From: Barry Margolin
Date: Wed, 11 Nov 1992 00:19
Date: Wed, 11 Nov 1992 00:19
18 lines
1167 bytes
1167 bytes
In article <83347@ut-emx.uucp> ifbb657@ccwf.cc.utexas.edu (Douglas Floyd) writes:
> What keeps any person who can anonymous ftp from going down your
>etc directory and grabbing the passwd file? Does ftp log this? I
>know that some Unix systems use a chroot system to lock anonymous
>ftp users into a restricted section of the directory. Do all
>ftp systems do this?
Most Unix anonymous FTP servers use chroot() to limit the access of
anonymous FTP. The /etc/passwd file it has access to is usually a minimal
version.
If you have a system that doesn't use chroot() for anonymous FTP, maybe it
has shadow passwords.
--
Barry Margolin
System Manager, Thinking Machines Corp.
barmar@think.com {uunet,harvard}!think!barmar
Technical Details
Message-ID:
<1dpjiqINNomg@early-bird.think.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!caen!sdd.hp.com!think.com!barmarReferences:
<83347@ut-emx.uucp>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!caen!sdd.hp.com!think.com!barmar From: barmar@think.com (Barry Margolin) Newsgroups: comp.security.misc Subject: Re: Grabbing your pw file from anonymous FTP Date: 11 Nov 1992 00:19:38 GMT Organization: Thinking Machines Corporation, Cambridge MA, USA Lines: 18 Message-ID: <1dpjiqINNomg@early-bird.think.com> References: <83347@ut-emx.uucp> NNTP-Posting-Host: telecaster.think.com