[2047] in bugtraq
Re: Security Problem ftpd (includes wu.ftpd 2.4 and 2.4.2 beta 4)
daemon@ATHENA.MIT.EDU (Casper Dik)
Thu Jul 13 19:28:13 1995
Date: Thu, 13 Jul 1995 16:43:38 +0200
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Casper Dik <casper@Holland.Sun.COM>
X-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To: Your message of "Thu, 13 Jul 1995 18:44:41 +1000."
<199507130844.AA26166@sour.sw.oz.au>
>> Am I correct in stating that this problem only occurs on SVR4 based unix's
>> [where /proc exists]? Or would, say, SunOS 4.1.x be affected?
>
>This affect's Linux's /proc, but may well be an issue with SVR4's /dev/fd
>directory. While this doesn't exist by default on SunOS 4, there is a
>commonly available kernel driver to implement it.
The /dev/fd pseudo directory gives access only to the filedescriptors
of the current process. They don't give access to outside processes.
Casper
