[6391] in bugtraq
Re: apache+ssl 1.13 symlink problem; NcFTP 2.4.2+
daemon@ATHENA.MIT.EDU (Mike Gleason)
Tue Mar 24 18:58:59 1998
Date: Tue, 24 Mar 1998 16:57:07 -0600
Reply-To: Mike Gleason <mgleason@NCFTP.COM>
From: Mike Gleason <mgleason@NCFTP.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <3518022F.B20977D7@algroup.co.uk>
At 06:57 PM 3/24/98 +0000, Ben Laurie wrote:
>Thanks for the report. It would've been courteous to let me do something
>about it before posting to a public forum, though.
I concur here. I was extremely disappointed to learn about the recent bug
in NcFTP 2.4.2 second hand. My email address is printed each and every
time NcFTP is run -- there's no excuse for this irresponsible behavior.
Thankfully, some users who gave a damn took time to forward me a copy, or
else I probably would not have heard about it.
Is the prevailing attitude around here that problems should be posted here
so there can be plenty of time for everyone to exploit and further
exacerbate the problem? I have since subscribed to this and other similar
lists, but I'd rather not have had to do that. If this is the way it's
going to be, then free and open source software isn't worth my time.
Mike Gleason
mgleason@NcFTP.com
