[1989] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Exploit for Linux wu.ftpd hole

daemon@ATHENA.MIT.EDU (Pete Shipley)
Thu Jul 6 00:29:54 1995

Date:         Wed, 5 Jul 1995 19:36:29 -0700
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Pete Shipley <shipley@dis.org>
X-To:         Bugtraq List <BUGTRAQ@CRIMELAB.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To:  Your message of Wed, 05 Jul 1995 18:28:23 -0500.
              <199507052328.SAA07635@prophet.concorde.com>

>Ahh, but isn't wu-ftp supposed to be running as uid ftp?
>
>where does the turnabout come in where ftpd runs as ROOT?

ftpd had to run as root so it can change it's uid to the ftp user.

home help back first fref pref prev next nref lref last post