Article View: comp.security.unix
Article #16Re: Security hole with WU-FTPD
From: Barry Margolin
Date: Mon, 18 Jan 1999 00:00
Date: Mon, 18 Jan 1999 00:00
14 lines
1689 bytes
1689 bytes
In article <distler-1801991415380001@192.168.0.2>, Jacques Distler <distler@golem.ph.utexas.edu> wrote: >Color me stupid, but why does he allow root ftp logins, *period*. >Shouldn't root be in his ftpusers file? Even if it were, it wouldn't have helped in this case. The line that the cracker added to /etc/passwd had a UID of 0, but the name wasn't "root". The ftpusers file lists names, not UIDs. -- Barry Margolin, barmar@bbnplanet.com GTE Internetworking, Powered by BBN, Burlington, MA *** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups. Don't bother cc'ing followups to me.
Technical Details
Message-ID:
<%3No2.325$oD6.26447@burlma1-snr1.gtei.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<369FBEFB.EB1531B6@gds.ca> <77tkol$b3b$1@nntp.ucs.ubc.ca> <mumfordF5rn4H.B0L@netcom.com> <distler-1801991415380001@192.168.0.2>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10952f,e0782a6bf0e6f7aa X-Google-Attributes: gid10952f,public X-Google-Thread: 102983,e0782a6bf0e6f7aa X-Google-Attributes: gid102983,public X-Google-Thread: fa777,e0782a6bf0e6f7aa X-Google-Attributes: gidfa777,public X-Google-Thread: 10669a,e0782a6bf0e6f7aa X-Google-Attributes: gid10669a,public From: Barry Margolin <barmar@bbnplanet.com> Subject: Re: Security hole with WU-FTPD Date: 1999/01/18 Message-ID: <%3No2.325$oD6.26447@burlma1-snr1.gtei.net> X-Deja-AN: 434136177 Distribution: world References: <369FBEFB.EB1531B6@gds.ca> <77tkol$b3b$1@nntp.ucs.ubc.ca> <mumfordF5rn4H.B0L@netcom.com> <distler-1801991415380001@192.168.0.2> X-Trace: burlma1-snr1.gtei.net 916692347 4.2.32.97 (Mon, 18 Jan 1999 20:45:47 GMT) Organization: GTE Internetworking, Cambridge, MA X-Copies-To: never NNTP-Posting-Date: Mon, 18 Jan 1999 20:45:47 GMT Newsgroups: comp.security.unix,redhat.networking.general,aus.computers.linux,comp.os.linux.networking Originator: barmar@bbnplanet.com (Barry Margolin)