[15497] in bugtraq
Re: WuFTPD: Providing *remote* root since at least1994
daemon@ATHENA.MIT.EDU (Tomasz Grabowski)
Tue Jun 27 16:50:30 2000
Mime-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-187412988-577098919-962119783=:17020"
Message-Id: <Pine.LNX.4.10.10006271719280.17020-200000@apollo.aci.com.pl>
Date: Tue, 27 Jun 2000 17:29:43 +0200
Reply-To: Tomasz Grabowski <cadence@APOLLO.ACI.COM.PL>
From: Tomasz Grabowski <cadence@APOLLO.ACI.COM.PL>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <20000622232836.A9789@drow.them.org>
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Send mail to mime@docserver.cac.washington.edu for more info.
---187412988-577098919-962119783=:17020
Content-Type: TEXT/PLAIN; charset=US-ASCII
Hello.
Few words about that SITE_EXEC bug.
AFAIK there aren't any patches for wu-ftpd-academ. Their Web Site is not
updated from Feb 29 1999 (as I remember it was the 2.4.2-Final release
date).
Anybody knows if it is supported yet?
Anyway I made a patch for that bug so You don't need to change Your
wu-ftpd-academ to wu-ftpd if You don't want.
___
Tomasz Grabowski [Akademickie Centrum Informatyki] {CADENCE of Lam3rZ}
The progress only comes through struggle...
---187412988-577098919-962119783=:17020
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="site_exec_bug.patch"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.10.10006271729430.17020@apollo.aci.com.pl>
Content-Description:
Content-Disposition: attachment; filename="site_exec_bug.patch"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---187412988-577098919-962119783=:17020--
