[4664] in bugtraq
Re: wu-ftpd 2.4.2-beta-13 default UMASK hole
daemon@ATHENA.MIT.EDU (George Staikos)
Wed Jun 11 19:54:28 1997
Date: Wed, 11 Jun 1997 17:13:32 -0400
Reply-To: George Staikos <staikos@0WNED.ORG>
From: George Staikos <staikos@0WNED.ORG>
X-To: "Roy M. Hooper" <rhooper@TOYBOX.OTTAWA.ON.CA>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199706111606.MAA22533@toybox.ottawa.on.ca>
On Wed, 11 Jun 1997, Roy M. Hooper wrote:
> The default umask for wu-ftpd 2.4.2-beta-13 is 002.
> Since most users on most sites are in the same group, all files created by
> users PUTting files would be group writeable by anyone. Not a good thing.
I contacted academ software regarding this issue on or about March 13
this year. The problem was present in beta-12 and beta-13 (perhaps
earlier releases too). There should hopefully be a patch in beta-14.
I have pasted the request number below...
-----8<------
[ACADEM-SW-SUPPORT #257] UMASK in wu-ftpd-2.4.2-beta-12
has been received and assigned a request number of 257.
-----8<-----
George
