Full Disclosure mailing list archives
Re: ws_ftp.log
From: "Hamby, Charles D." <Chamby () matsu alaska edu>
Date: Sun, 15 Aug 2004 22:29:27 -0800
Cut the guy a little slack, Wood. Yeah, it's been around forever and a day, but maybe his e-mail will cause someone reading it to go looking in their Enterprise for it and find some moron webmaster using it on an Internet-facing server. If so, he did some good. Relax. -----Original Message----- From: full-disclosure-admin () lists netsys com on behalf of morning_wood Sent: Sun 8/15/2004 8:05 AM To: Gaurang Pandya; full-disclosure () lists netsys com Subject: Re: [Full-disclosure] ws_ftp.log your serious?? this issue has been arround for about 10 years... try googling "ws_ftp.ini" where you can simply drop the ini in your ws_ftp folder, convert the hashes or import into your favorite ftp client that supports ws_ftp.ini style format. m.wood ----- Original Message ----- From: "Gaurang Pandya" <gaubrig () yahoo com> To: <full-disclosure () lists netsys com> Sent: Sunday, August 15, 2004 5:19 AM Subject: [Full-disclosure] ws_ftp.log
Hi, WS_FTP is a popular & feature rich ftp client. It makes upload/download as easy as drag & drop. But mostly peoples using this forget that it creates a log file with name ws_ftp.log. This file holds sensitive data such as file source/destination and file name, date/time of upload etc., People when use this to upload files to their website, never know that along with other files even ws_ftp.log file also gets uploaded to the webserver, making it globally accessible.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- ws_ftp.log Gaurang Pandya (Aug 15)
- Re: ws_ftp.log Ill will (Aug 15)
- Re: ws_ftp.log morning_wood (Aug 15)
- Re: ws_ftp.log Steve Kudlak (Aug 15)
- <Possible follow-ups>
- Re: ws_ftp.log Hamby, Charles D. (Aug 16)
- Re: ws_ftp.log ChrisR- (Aug 16)
- Re: Re: ws_ftp.log Gaurang Pandya (Aug 16)