Date: 06 Mar 2001 03:59:52 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Adam <bsdx@looksharp.net> Cc: "Riley J. McIntire" <rjmcintire@earthlink.net>, "Aaron D.Gifford" <agifford@infowest.com>, <freebsd-security@FreeBSD.ORG> Subject: Re: ftp access Message-ID: <xzp4rx71u1j.fsf@flood.ping.uio.no> In-Reply-To: Adam's message of "Mon, 5 Mar 2001 21:27:04 -0500 (EST)" References: <Pine.BSF.4.33.0103052126390.13417-100000@turtle.looksharp.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Adam <bsdx@looksharp.net> writes: > What happens if they have a valid ftp account, login, and run !sh ? They get a shell on the box they're FTPing from. DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp4rx71u1j.fsf>