[6353] in bugtraq
Re: BSD/OS 3.0 config_anonftp script
daemon@ATHENA.MIT.EDU (Bill Becker)
Fri Mar 20 12:56:12 1998
Date: Wed, 18 Mar 1998 17:39:52 -0500
Reply-To: Bill Becker <bbecker@ICONN.NET>
From: Bill Becker <bbecker@ICONN.NET>
X-To: trey <trey@ANALOG.ORG>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.BSI.3.95.980316162610.4627A-100000@analog.org>
On Mon, 16 Mar 1998, trey wrote:
> BSD/OS 3.0 comes without any anonymous ftp set up out-of-the-box.
> Configuration of anonymous ftp is provided by the perl script
> /usr/sbin/config_anonftp (for those who don't just set this up by hand).
> A problem seems to exist in the following lines of this script:
>
> ©_file("/etc", "group", "$ftp{\"DIR\"}/etc", 0444);
> ©_file("/etc", "pwd.db", "$ftp{\"DIR\"}/etc", 0444);
>
> What ever happened to creating dummy group and passwd files for anonymous
> ftp? This script copies the full system group and pwd.db files where
Also true for BSDI 2.0, 2.01, and 2.1.
Bill
