[12775] in bugtraq
Re: wu-ftpd bug
daemon@ATHENA.MIT.EDU (Gregory A Lundberg)
Tue Nov 30 12:21:57 1999
Mail-Followup-To: m4rcyS <marcys@FREE.COM.PL>,
BUGTRAQ@SECURITYFOCUS.COM, WU-FTPD Questions
<wuftpd-questions@wu-ftpd.org>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="Qrgsu6vtpU/OV/zm"; micalg=pgp-md5;
protocol="application/pgp-signature"
Message-Id: <19991129224302.E8931@vr.net>
Date: Mon, 29 Nov 1999 22:43:03 -0500
Reply-To: Gregory A Lundberg <lundberg@VR.NET>
From: Gregory A Lundberg <lundberg@VR.NET>
X-To: m4rcyS <marcys@FREE.COM.PL>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <Pine.LNX.4.10.9911291642130.1580-100000@pentium.localdomain>;
from m4rcyS on Mon, Nov 29, 1999 at 05:43:16PM +0100
--Qrgsu6vtpU/OV/zm
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
On Mon, Nov 29, 1999 at 05:43:16PM +0100, m4rcyS wrote:
> # echo guestserver >>/etc/ftpaccess
> $ ftp 0
> Connected to 0.
> 220 FTP server ready.
> Name (0:marcys): ftp
> 331 Guest login ok, send your complete e-mail address as password.
>=20
> Huh ? Pretty funny :) Now there're 3 possibilities:
> 1. ftpd bug
> 2. man page bug
> 3. I'm misunderstanding all this stuff
>=20
> Which one's correct ?
After some experimentation with the server, thinking about things, and
reading the manpage:
'2' is the correct answer. The hostname parameter should be documented as
required.
To deny anonymous access on the server, use the defaultserver clause:
defaultserver private
I presume your patch is to make the daemon performed as documented. Since
the documentation (and syntax) is better as it now reads, I'll see your
patch is considered for inclusion in a future version of the daemon.
--=20
Gregory A Lundberg WU-FTPD Development Group
1441 Elmdale Drive lundberg@wu-ftpd.org
Kettering, OH 45409-1615 USA 1-800-809-2195
--Qrgsu6vtpU/OV/zm
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5
iQB1AwUBOEM5sw2nXFkJc83RAQGlQQMAwV5yG7oAYs0KHD6y23couzQJuZFwzr87
POewNHRRmV21p12I6/NU70oks/M9WlgEKGU1KxMzwLEb6A/Rm6lBdAExwd7vN8te
Igkw4qIw0sn5SKQA7i3tdiI5iYL4JGXQ
=quXG
-----END PGP SIGNATURE-----
--Qrgsu6vtpU/OV/zm--
