Bugtraq mailing list archives

Re: mod_sqlpw Password Caching Bug


From: "Todd C. Campbell" <todd.campbell () VOYAGER NET>
Date: Tue, 12 Dec 2000 23:05:30 +0000

Miller wrote:

<snip>
At this point, the user "bob" is logged in as the user "alice" without
knowing alice's password.

This maybe true, however, if you are chrooting your users with proftpd,
you end up becoming another user inside your own userspace.

-Toddc


Current thread: