Re: Security hole with WU-FTPD

Article View: comp.security.unix

Article #6

Back to comp.security.unix Previous Next

From: M. Buchenrieder
Date: Mon, 18 Jan 1999 00:00

22 lines
1777 bytes

unruh@physics.ubc.ca (Bill Unruh) writes:

[...]
>His comment is that while login does not allow a remote root login with no
>password, ftp does allow a root login with no password. This is what he
>is calling the bug in ftpd.  It certainly is an inconsistancy between
>the two.

Agreed. Perhaps I should have added that remote root logins are
prevented generally based on the EUID used, not the actual loginname
(at least, with standard security precautions activated). From that
point of view, this is a WU-FTPD flaw.

>It is also true that this bug is minor compared to the bug which allowed
>a root user to be entered into passwd without a password.

Yup.

Michael
-- 
Michael Buchenrieder * mibu@scrum.greenie.muc.de * http://www.muc.de/~mibu
          Lumber Cartel Unit #456 (TINLC) & Official Netscum

Technical Details

Message-ID: <781ous$uvl$154@news4.muc.eurocyber.net>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<369FBEFB.EB1531B6@gds.ca> <0yRn2.85285$c8.41002764@hme2.newscontent-01.sprint.ca> <8YRn2.250$oD6.15990@burlma1-snr1.gtei.net> <F5n9LH.AnB@scrum.muc.de> <SS3o2.269$oD6.18936@burlma1-snr1.gtei.net> <F5p6AI.569@scrum.muc.de> <77tkol$b3b$1@nntp.ucs.ubc.ca>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,e0782a6bf0e6f7aa
X-Google-Attributes: gid10952f,public
X-Google-Thread: 102983,e0782a6bf0e6f7aa
X-Google-Attributes: gid102983,public
X-Google-Thread: 10669a,e0782a6bf0e6f7aa
X-Google-Attributes: gid10669a,public
X-Google-Thread: fa777,e0782a6bf0e6f7aa
X-Google-Attributes: gidfa777,public
From: mibu@scrum.muc.de (M. Buchenrieder)
Subject: Re: Security hole with WU-FTPD
Date: 1999/01/18
Message-ID: <781ous$uvl$154@news4.muc.eurocyber.net>
X-Deja-AN: 434366985
References: <369FBEFB.EB1531B6@gds.ca> <0yRn2.85285$c8.41002764@hme2.newscontent-01.sprint.ca> <8YRn2.250$oD6.15990@burlma1-snr1.gtei.net> <F5n9LH.AnB@scrum.muc.de> <SS3o2.269$oD6.18936@burlma1-snr1.gtei.net> <F5p6AI.569@scrum.muc.de> <77tkol$b3b$1@nntp.ucs.ubc.ca>
Organization: private Linux-site
Newsgroups: comp.security.unix,redhat.networking.general,aus.computers.linux,comp.os.linux.networking

Reply to Parent Message