How do I remove myself from the listing
[email protected] Tue, 23 Mar 2004 12:58:19 +0000
| Newsgroups | gmane.network.ftp.wuftpd.user,gmane.network.ftp.wuftpd.devel |
|---|---|
| Message-ID | <[email protected]> |
How do I remove myself from the listing? Hello, I haven't received any responses yet on this matter. This is not the S/Key vulnerability I am talking about. This is a new security vulnerability reported in wu-ftpd. This seems to be very much critical; I have attached a small description of the same below. Would greatly appreciate if some one could respond. Thanks, Rajesh. Rajesh Somasundaran wrote: > Hello, > > I saw a new security vulnerability reported on wu-ftpd (CERT advisory > note CAN-2004-0148). I read it from > http://www.cert-ist.com/english/advisories/listeavis_en.htm along with > the s/key vulnerability. > > CAN-2004-0148 Description: wu-ftpd 2.6.2 and earlier, with the > restricted-gid option enabled, allows local users to bypass access > restrictions by changing the permissions to prevent access to their > home directory, which causes wu-ftpd to use the root directory instead. > > Is there any patch available for this vulnerability? I couldn't see > any in www.wu-ftpd.org !!! > > Thanks, > Rajesh. Hello, I haven't received any responses yet on this matter. This is not the S/Key vulnerability I am talking about. This is a new security vulnerability reported in wu-ftpd. This seems to be very much critical; I have attached a small description of the same below. Would greatly appreciate if some one could respond. Thanks, Rajesh. Rajesh Somasundaran wrote: Hello, I saw a new security vulnerability reported on wu-ftpd (CERT advisory note CAN-2004-0148). I read it from http://www.cert-ist.com/english/advisories/listeavis_en.htm along with the s/key vulnerability. CAN-2004-0148 Description: wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead. Is there any patch available for this vulnerability? I couldn't see any in www.wu-ftpd.org !!! Thanks, Rajesh.