Re: Q: Impact of globbing vulnerability in ftpd

From: Kris Kennaway (kris@obsecurity.org)
Date: 04/24/01

Next message: Daniel Hagan: "Re: Connection attempts (& active ids)"
Previous message: Kris Kennaway: "Re: other services vulnerable to globbing exploit?"
In reply to: Victor Sudakov: "Re: Q: Impact of globbing vulnerability in ftpd"
Next in thread: Victor Sudakov: "Re: Q: Impact of globbing vulnerability in ftpd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Tue, 24 Apr 2001 11:50:22 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Victor Sudakov <sudakov@sibptus.tomsk.ru>

On Tue, Apr 24, 2001 at 10:00:44AM +0800, Victor Sudakov wrote:

> Do you know of any exploits that can run arbitrary code via ftpd
> not with the euid of the user (possible anonymous) , but with root privileges?

I'm sure they exist.

Kris

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

application/pgp-signature attachment: stored

Next message: Daniel Hagan: "Re: Connection attempts (& active ids)"
Previous message: Kris Kennaway: "Re: other services vulnerable to globbing exploit?"
In reply to: Victor Sudakov: "Re: Q: Impact of globbing vulnerability in ftpd"
Next in thread: Victor Sudakov: "Re: Q: Impact of globbing vulnerability in ftpd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]