How do I remove myself from the listing

[email protected] Tue, 23 Mar 2004 12:58:19 +0000
Newsgroups gmane.network.ftp.wuftpd.user,gmane.network.ftp.wuftpd.devel
Message-ID <[email protected]>
How do I remove myself from the listing?

Hello,

I haven't received any responses yet on this matter. This is not the 
S/Key vulnerability I am talking about. This is a new security 
vulnerability reported in wu-ftpd. This seems to be very much critical; 
I have attached a small description of the same below.

Would greatly appreciate if some one could respond.

Thanks,
Rajesh.

Rajesh Somasundaran wrote:

> Hello,
>
> I saw a new security vulnerability reported on wu-ftpd (CERT advisory 
> note CAN-2004-0148). I read it from 
> http://www.cert-ist.com/english/advisories/listeavis_en.htm along with 
> the s/key vulnerability.
>
> CAN-2004-0148 Description:  wu-ftpd 2.6.2 and earlier, with the 
> restricted-gid option enabled, allows local users to bypass access 
> restrictions by changing the permissions to prevent access to their 
> home directory, which causes wu-ftpd to use the root directory instead.
>
> Is there any patch available for this vulnerability? I couldn't see 
> any in www.wu-ftpd.org !!!
>
> Thanks,
> Rajesh.

Hello,

I haven't received any responses yet on this matter. This is not the S/Key
vulnerability I am talking about. This is a new security vulnerability reported
in wu-ftpd. This seems to be very much critical; I have attached a small
description of the same below.

Would greatly appreciate if some one could respond.

Thanks,

Rajesh.

Rajesh Somasundaran wrote:

Hello,

I saw a new security vulnerability reported on wu-ftpd (CERT advisory note
CAN-2004-0148). I read it from http://www.cert-ist.com/english/advisories/listeavis_en.htm
along with the s/key vulnerability.

CAN-2004-0148 Description:
wu-ftpd 2.6.2 and
earlier, with the restricted-gid option enabled, allows local users to bypass
access restrictions by changing the permissions to prevent access to their
home directory, which causes wu-ftpd to use the root directory instead.

Is there any patch available for this vulnerability? I couldn't see any
in www.wu-ftpd.org
!!!

Thanks,

Rajesh.