Bugtraq mailing list archives

Re: wu-ftpd bug


From: lundberg () VR NET (Gregory A Lundberg)
Date: Mon, 29 Nov 1999 22:43:03 -0500


On Mon, Nov 29, 1999 at 05:43:16PM +0100, m4rcyS wrote:

# echo guestserver >>/etc/ftpaccess
$ ftp 0
Connected to 0.
220 FTP server ready.
Name (0:marcys): ftp
331 Guest login ok, send your complete e-mail address as password.

Huh ? Pretty funny :) Now there're 3 possibilities:
1. ftpd bug
2. man page bug
3. I'm misunderstanding all this stuff

Which one's correct ?

After some experimentation with the server, thinking about things, and
reading the manpage:

'2' is the correct answer.  The hostname parameter should be documented as
required.

To deny anonymous access on the server, use the defaultserver clause:

  defaultserver private

I presume your patch is to make the daemon performed as documented.  Since
the documentation (and syntax) is better as it now reads, I'll see your
patch is considered for inclusion in a future version of the daemon.

-- 

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              lundberg () wu-ftpd org
Kettering, OH 45409-1615 USA    1-800-809-2195


<HR NOSHADE>
<UL>
<LI>application/pgp-signature attachment: stored
</UL>


Current thread: