ftpd + Win98 = security hole
Tom Weichmann
tomcw@localnet.com
Mon May 22 23:30:00 GMT 2000
I have noticed that when running ftpd from inetd, anyone can log in
via anonymous ftp. Usually the ftpd will chroot to /home/ftp for an
anonymous login, but under win98 chroot does not work. This
leaves user anonymous with read, write, execute, delete access to
your whole machine. I tried adding user ftp to /etc/ftpusers, but
this did not prevent the login. Is there any way to disable
anonymous logins via ftpd?
Thanks,
Tom Weichmann
--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com
More information about the Cygwin
mailing list