Re: Security hole with WU-FTPD

Article View: comp.security.unix

Article #15

Back to comp.security.unix Previous Next

#15

From: Jacques Distler
Date: Mon, 18 Jan 1999 00:00

22 lines
2053 bytes

In article <mumfordF5rn4H.B0L@netcom.com>, mumford@netcom.com (mumford) wrote:

>>His comment is that while login does not allow a remote root login
>>with no password, ftp does allow a root login with no password. This
>>is what he is calling the bug in ftpd.  It certainly is an 
>>inconsistancy between the two.
>>
>>It is also true that this bug is minor compared to the bug which allowed
>>a root user to be entered into passwd without a password.
>
>In a way it is an inconsistancy, but in another way it isn't.  The linux
>login program has been hacked (if you will) to pay attention to a file
>called /etc/securetty (may vary from dstrib to distrib).  Wu-ftpd could
>not care less about this file, since ftp doesn't open a tty.

Color me stupid, but why does he allow root ftp logins, *period*.
Shouldn't root be in his ftpusers file?

JD

-- 
PGP public key: http://golem.ph.utexas.edu/~distler/distler.asc

Technical Details

Message-ID: <distler-1801991415380001@192.168.0.2>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<369FBEFB.EB1531B6@gds.ca> <SS3o2.269$oD6.18936@burlma1-snr1.gtei.net> <F5p6AI.569@scrum.muc.de> <77tkol$b3b$1@nntp.ucs.ubc.ca> <mumfordF5rn4H.B0L@netcom.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,e0782a6bf0e6f7aa
X-Google-Attributes: gid10952f,public
X-Google-Thread: 10669a,e0782a6bf0e6f7aa
X-Google-Attributes: gid10669a,public
X-Google-Thread: fa777,e0782a6bf0e6f7aa
X-Google-Attributes: gidfa777,public
X-Google-Thread: 102983,e0782a6bf0e6f7aa
X-Google-Attributes: gid102983,public
From: distler@golem.ph.utexas.edu (Jacques Distler)
Subject: Re: Security hole with WU-FTPD
Date: 1999/01/18
Message-ID: <distler-1801991415380001@192.168.0.2>
X-Deja-AN: 434125083
References: <369FBEFB.EB1531B6@gds.ca> <SS3o2.269$oD6.18936@burlma1-snr1.gtei.net> <F5p6AI.569@scrum.muc.de> <77tkol$b3b$1@nntp.ucs.ubc.ca> <mumfordF5rn4H.B0L@netcom.com>
X-Image-URL: http://golem.ph.utexas.edu/~distler/x-image.jpg
X-Face: #m:M:[ZK_2%p0fVui~CU:PB(Lv<2h/^?'zdcs29!62<k:VuJnr=j}IK$ohm&T /gnVR"|LWyKVK{`$&t&`k{]Q^x*"ihe+^hTvWs@IEMtYI5RVzGFBPcMu`}>@#^Fm:<)M w83/\[@#\u?TVrF3fqDjK?
Organization: Physics Department, University of Texas at Austin
Newsgroups: comp.security.unix,redhat.networking.general,aus.computers.linux,comp.os.linux.networking

Reply to Parent Message