Bugtraq mailing list archives

Re: Multiple-Vendor-FTP-Vuln. (old?)

From: Scott Dier <dieman () ringworld org>
Date: Mon, 20 Aug 2001 15:35:06 -0500

* Enrico Kern <IphantomI () web de> [010820 12:31]:

Hi,

i tested an old proftpd bug (ls /../*/../*/../*/../*/../*/../*/../*) on =


http://www.proftpd.org/critbugs.html

Add "DenyFilter \*.*/" to your config.

No software patch beats actual systems administration.

-- 
Scott Dier <dieman () ringworld org> <sdier () debian org>
http://www.ringworld.org/  #linuxos () irc openprojects net

Current thread:

Multiple-Vendor-FTP-Vuln. (old?) Enrico Kern (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) skip (Aug 20)
  - RE: Multiple-Vendor-FTP-Vuln. (old?) jeev (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) Scott Dier (Aug 20)
- RE: Multiple-Vendor-FTP-Vuln. (old?) Mike Jakubik (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) Bernhard Rosenkraenzer (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) Roman Drahtmueller (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) Dmitriy Kropivnitskiy (Aug 21)
- <Possible follow-ups>
- Re: Multiple-Vendor-FTP-Vuln. (old?) Michael Faurot (Aug 20)
  - Re: Multiple-Vendor-FTP-Vuln. (old?) Robert van der Meulen (Aug 20)
- RE: Multiple-Vendor-FTP-Vuln. (old?) E. van Elk (Aug 20)
- RE: Multiple-Vendor-FTP-Vuln. (old?) Michael Bellears (Aug 20)
- Re: Multiple-Vendor-FTP-Vuln. (old?) Michael Faurot (Aug 20)