Re: Secure FTP Server Search

From: IDS Guy (ids_guy@yahoo.com)
Date: 11/17/02

  • Next message: Stephen Wilcox: "RE: PIX Question" 
    Date: Sun, 17 Nov 2002 00:06:40 -0800 (PST)
From: IDS Guy <ids_guy@yahoo.com>
To: Charley Hamilton <chamilto@uci.edu>, security-basics@securityfocus.com

    You can have a look at CERT's site for information
    about these FTP commands.

    E.g.; for PORT command, please see the following
    links...

    http://www.cert.org/advisories/CA-1997-27.html
    http://www.cert.org/tech_tips/ftp_port_attacks.html

    --- Charley Hamilton <chamilto@uci.edu> wrote:
    > I've used sshd under cygwin on win2k for academic
    > access purposes.
    > Never dealt with it for general (i.e. varied trust
    > level) sftp
    > access. Don't know enough to comment on whether it
    > meets your
    > requirement
    >
    > > not to have some vulnerabilities related with FTP
    > > commands such as FTP PORT / SITE / NLIST
    >
    > If someone who is more clueful wouldn't mind
    > enlightening me,
    > I'd be interested to know, though....
    >
    > Charley
    >
    > --
    > Charles Hamilton, PhD EIT Faculty
    > Fellow
    > Department of Civil and Phone:
    > 949.824.3752
    > Environmental Engineering FAX:
    > 949.824.2117
    > University of California, Irvine Email:
    > chamilto@uci.edu
    >
    >

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Web Hosting - Let the expert host your site
    http://webhosting.yahoo.com

    • Quantcast