Re: bug in ftp

2000-02-28 Thread Tressens Lionel
Le 28.02.00 a 12:38, "Bernhard Rosenkraenzer" m'ecrivait : )I still can't reproduce it here (running wu-ftpd-2.6.0-3). Which versions )have you installed? Are you using any strange authentication methods )(S/Key, OPIE, ...)? Local user or NIS? Any chance the users somehow got )the same UID? I ru

Re: bug in ftp

2000-02-28 Thread Nitesh Dhanjani
what does "ls -l /home" show? are the home directories of your users world writeable? nitesh. On Mon, 28 Feb 2000, Bernhard Rosenkraenzer wrote: > On Mon, 28 Feb 2000, Tressens Lionel wrote: > > > You're right on this example. > > Look at this trace (I am user tressens. jarcas is another user

Re: bug in ftp

2000-02-28 Thread Bernhard Rosenkraenzer
On Mon, 28 Feb 2000, Tressens Lionel wrote: > You're right on this example. > Look at this trace (I am user tressens. jarcas is another user) : I still can't reproduce it here (running wu-ftpd-2.6.0-3). Which versions have you installed? Are you using any strange authentication methods (S/Key, O

Re: bug in ftp

2000-02-28 Thread Tressens Lionel
Le 28.02.00 a 11:54, "Bernhard Rosenkraenzer" m'ecrivait : )On Mon, 28 Feb 2000, Tressens Lionel wrote: ) )> Sorry, I made a mistake. A user can change the mode of a file, even if it )> doesn't belong to him. (with the command chmod). ) )What permissions does the file currently have? I can't repr

Re: bug in ftp

2000-02-28 Thread Bernhard Rosenkraenzer
On Mon, 28 Feb 2000, Tressens Lionel wrote: > Sorry, I made a mistake. A user can change the mode of a file, even if it > doesn't belong to him. (with the command chmod). What permissions does the file currently have? I can't reproduce it here right out of the box: ftp> cd /etc 250 CWD command

Re: bug in ftp

2000-02-28 Thread Tressens Lionel
Le 28.02.00 a 11:15, "Bernhard Rosenkraenzer" m'ecrivait : )On Mon, 28 Feb 2000, Tressens Lionel wrote: ) )> I discovered a big problem in ftp running on my box. )> )> Through ftp, any user can set the owner of any file, even if it doesn't )> belong to him. ) )How? Which commands do you send to

Re: bug in ftp

2000-02-28 Thread Bernhard Rosenkraenzer
On Mon, 28 Feb 2000, Tressens Lionel wrote: > I discovered a big problem in ftp running on my box. > > Through ftp, any user can set the owner of any file, even if it doesn't > belong to him. How? Which commands do you send to change the owner? LLaP bero -- To unsubscribe: mail [EMAIL PROT

bug in ftp

2000-02-28 Thread Tressens Lionel
Hi list, I discovered a big problem in ftp running on my box. Through ftp, any user can set the owner of any file, even if it doesn't belong to him. For the moment, I disabled ftp. Is this a problem of settings ? (I doubt !) My config : RH 6.1 Kernel 2.2.12-20 package wu-ftp-2.6.0-1 package n